Privacy Policy
Last updated: July 13, 2026
Flash USDT Protector ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our Chrome browser extension handles information.
TL;DR: We do not collect, store, or transmit any personal data. All analysis happens locally in your browser.
1. Information We Do NOT Collect
Flash USDT Protector does not collect, store, sell, or share any of the following:
- Personally identifiable information (name, email, address, phone number)
- Financial data (bank accounts, credit cards, transaction history)
- Authentication credentials (passwords, private keys, seed phrases)
- Browsing history or search queries
- Location data (IP address, GPS coordinates)
- Personal communications (emails, messages)
- Health or medical data
2. How the Extension Works
Flash USDT Protector operates entirely within your browser:
- Content Script: Reads publicly visible transaction data on supported DEX websites to detect potential flash USDT attacks
- Local Analysis: All risk assessment and pattern matching happens locally using JavaScript executed in your browser
- API Calls: The extension sends only anonymous transaction hashes to our API (
flash-usdt-protector.vercel.app) to check against a known threat database. No personal identifiers are included - Local Storage: Settings and statistics are stored locally using Chrome's storage API and never leave your device
3. Data Sent to Our API
When checking a transaction, the extension sends the following to our API:
| Data | Purpose | Personal? |
|---|---|---|
| Transaction hash | Look up transaction details | No |
| Contract address | Check against blacklist | No |
| Chain ID | Identify blockchain network | No |
This data is processed in real-time and is not stored on our servers after the response is sent.
4. Permissions Explained
The extension requests the following Chrome permissions:
- activeTab: Required to read transaction data on the currently open DEX page
- storage: Required to save your settings and statistics locally
- alarms: Required to schedule periodic threat database updates
- host_permissions: Required to inject content scripts on supported DEX websites and communicate with our API
5. Third-Party Services
Our API is hosted on Vercel. Vercel's privacy policy applies to the hosting infrastructure. We do not use any analytics, tracking, or advertising services.
6. Children's Privacy
Our extension does not knowingly collect any information from children under 13 years of age.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
8. Contact
If you have questions about this Privacy Policy, contact us at:
- Email: contact@flash-usdt-protector.vercel.app
- GitHub: github.com/TODO