🛡️ ZERO-KNOWLEDGE USER DATA PRIVACY POLICY

Privacy Policy for GasShield — Web3 Gas Optimization Engine

Effective Date: October 8, 2026 • Extension ID: jmpcfgahmidjdpmihdikiamkibijfhik ↗ • Applicable to: GasShield Chrome Extension & Official Web Services

1. Single Purpose Declaration

In accordance with the Google Chrome Web Store Single Purpose Policy, GasShield — Web3 Gas Optimization & Protection Suite has a single, well-defined purpose:

Single Purpose: GasShield empowers Web3 users to safely and efficiently execute on-chain transactions by minimizing gas costs (up to 100% gasless via ERC-4337), shielding transactions from MEV sandwich attacks and phishing drainers, finding optimal cross-chain bridge routes, and routing DEX swaps and limit orders via client-side zero-knowledge execution.

All integrated services—Gas Optimization, MEV Protection, Cross-Chain Bridge Arbitrage, and DEX Limit Orders—operate strictly client-side to fulfill this single stated purpose.

2. Data Handling & Zero-Knowledge Architecture

GasShield is engineered with a strict Zero-Knowledge and Client-Side Data Minimization architecture. We operate on the foundational principle that user privacy in Web3 is paramount.

Data Category Collection Status Technical Details
Personally Identifiable Information (PII) NOT COLLECTED We do not collect names, email addresses, physical addresses, phone numbers, or IP addresses.
Private Keys & Seed Phrases NEVER ACCESSED Cryptographic signing is strictly delegated to your underlying self-custodial wallet (e.g., MetaMask, Rabby, Coinbase Wallet). GasShield never has access to private keys or secrets.
Web Browsing History & Activity NOT TRACKED GasShield does not log, record, or transmit URLs you visit, search queries, or browsing behavior.
Keystrokes & Form Inputs NEVER LOGGED The extension does not monitor keystrokes, form submissions, or authentication passwords.
Transaction Calldata & Simulation LOCAL IN-MEMORY ONLY EVM calldata is analyzed entirely in-memory within your local browser tab to simulate gas and detect drainers. No calldata is sent to any proprietary telemetry server.
Bridge & DEX Market Quotes DIRECT PUBLIC QUERIES Bridge fee arbitrage (Across, Stargate, Hop) and DEX swap quotes (1inch, Paraswap) are queried directly from public decentralized pricing endpoints. No wallet address or identity is tied to price requests.
MEV Private RPC Routing ZERO-LOG RELAYS When MEV Protection is enabled, transactions are optionally broadcast through zero-log private mempool endpoints (e.g. Flashbots Protect, MEV Blocker) to prevent front-running. GasShield does not intermediate or retain transaction payloads.

3. Chrome Extension Permissions & Justifications

GasShield requests only the minimum permissions necessary to deliver local gas optimization and kinetic threat interception:

  • storage: Used strictly on your local device (via chrome.storage.local) to store your network configuration preferences (e.g. Ethereum Mainnet, Arbitrum L2, Base), user gas threshold triggers, limit order states, and pre-flight simulation verdict cache. This data never leaves your device and is never synced externally.
  • activeTab: Used solely to detect active Web3 decentralized applications (dApps) and render the pre-flight transaction security inspection overlay when you initiate an EVM contract call.
  • alarms: Used solely to schedule periodic background checks for EVM base fee fluctuations (EIP-1559 base fee cycles) and limit order trigger checks so that estimates remain accurate.
  • Host Permissions (https://*/*): Required to wrap the window.ethereum EIP-1193 provider on Web3 dApps at document_start to inspect calldata and block wallet drainers before raw transactions reach your wallet.

4. Limited Use & Data Sharing Policy

In strict compliance with the Google Chrome Web Store Developer Program Policies:

  • No Sale of Data: GasShield does not sell, rent, lease, or monetize user data under any circumstances.
  • No Data Brokering or Advertising: We do not transfer or disclose user data to third parties, data brokers, advertising networks, or analytics trackers.
  • No Creditworthiness Scoring: We do not use transaction data to determine creditworthiness or consumer financial scoring.
  • Chrome Web Store Limited Use Statement: GasShield's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

5. Interactions with Blockchain Protocols, DEXs & Bridge Providers

When simulating transactions or optimizing gas parameters, GasShield interacts directly with standard decentralized blockchain RPC endpoints (e.g., standard public Ethereum/Arbitrum RPC nodes or your configured wallet provider) via standard eth_call and eth_estimateGas requests.

Additionally:

  • Cross-Chain Bridges: When checking bridge arbitrage rates, GasShield queries public read-only quotation endpoints from decentralized bridge protocols (such as Across Protocol, Stargate, or Hop). These queries are anonymous and contain no user identity or account signatures.
  • DEX Aggregation & Limit Orders: Swaps and limit orders query public routing APIs (such as 1inch and Paraswap) for liquidity calculations. All trade executions require explicit user authorization through the user's connected Web3 wallet.
  • MEV Protection: When enabled, transactions are relayed directly to public private-mempool builders (Flashbots Protect, Beaver Builder, MEV Blocker) which prevent malicious searchers from sandwiching or front-running your order.

These interactions are direct client-to-blockchain or client-to-protocol communications and are subject to each respective decentralized protocol's terms and privacy policies.

6. Data Retention, User Control & Deletion

Because GasShield does not transmit or store user data on remote servers, no user data is retained externally.

All local configuration data stored by the extension on your machine can be erased at any time by:

  • Opening Chrome settings and clearing extension data in chrome://extensions; or
  • Uninstalling the GasShield extension from your browser.

7. Children's Privacy (COPPA Compliance)

GasShield is not directed at or intended for children under the age of 13. We do not knowingly collect or solicit personal information from children under 13.

8. European (GDPR/EU DSA) & California (CCPA) Privacy Rights

If you are an EU or California resident, you have the right to access, rectify, or erase any personal data held about you. Because GasShield implements complete Zero-Knowledge data minimization and does not store or process personal data on external servers, no personal identifiers are tied to your device or wallet. For any privacy requests or inquiries, contact us at the address below.

9. Policy Updates & Official Contact

We may update this Privacy Policy from time to time. Any revisions will be posted directly to this URL with an updated effective date.

If you have questions regarding this Privacy Policy, our cryptographic invariants, or wish to submit a security disclosure: