Privacy Policy

Effective date: 2025-12-07

Summary

The Top1 Trading Extension is a self-custody browser extension (non-custodial). This means: private keys / seed phrases are stored locally in the browser and do not leave the device unless the user explicitly initiates such an action. We do not collect personal data by default. Optional telemetry is always opt-in and anonymized.

Age Requirement: You must be at least 18 years old to use this Extension.

What data is collected and stored?

• Server-side data (minimal): We only store your username and associated public key (wallet address) if you create an account. We NEVER store, transmit, or have access to your seed phrases or private keys.
• Local wallet data: All sensitive data including encrypted seed phrases, private keys, wallet metadata (account lists, labels), and settings are stored exclusively in chrome.storage.local on your device. This data never leaves your device.
• Optional telemetry (with consent only): Anonymized usage metrics (e.g. feature usage, error counts, app version). No wallet addresses, no transaction contents, no seed phrases.
• External API calls: The extension calls specific third-party APIs to display price data, token metadata, images, etc. A list of actual origins contacted is provided below.
• No advertising/tracking cookies: We do not store third‑party cookies for advertising purposes.

List of external endpoints / origins

The extension contacts the following origins (for example for price data, token images, social embeds). This list may change with updates:

https://cdn.syndication.twimg.com
https://api.geckoterminal.com
https://app.geckoterminal.com
https://www.geckoterminal.com
https://birdeye.so
https://frontend-api-v3.pump.fun
https://api.rugcheck.xyz
https://api.coinlore.net
https://api.top1.trade
https://external-web-proxy.coinledger.io
https://api.phantom.app
https://ipfs.io
https://coin-images.coingecko.com
https://dexscreener.com
https://axiom.trade
https://padre.gg
https://t.me
https://discord.com
https://twitter.com
https://x.com
  

How are keys and seed phrases protected?

Industry-standard encryption: All seed phrases and private keys are encrypted using industry-standard cryptography before being stored:

• Key Derivation: PBKDF2 with SHA-256 hash function and 310,000 iterations
• Encryption: AES-GCM with 256-bit keys
• Storage: Encrypted data is stored only in chrome.storage.local on your device
• Plain text: Seed phrases and private keys are NEVER stored in plain text
• Transmission: Seed phrases and private keys NEVER leave your device and are NEVER transmitted to any server
• Session data: Temporary session data may use chrome.storage.session but is cleared when you lock your wallet

Your responsibility: The security of your wallet depends on keeping your password secure. If you lose your password and seed phrase backup, you will lose access to your funds permanently.

Telemetry

Telemetry refers to the collection of anonymized usage data (e.g. which feature was used, crash reports). Telemetry is:

• always opt-in (the user must actively enable it),
• anonymized (no wallet addresses, no PII),
• transparent (can be toggled on/off in settings), and
• kept for a limited time and aggregated.

Example of a minimal telemetry event (anonymized):

{ "event": "backup_initiated", "version": "1.0.0", "ts": "2025-12-07T12:34:56Z" }

Legal basis & retention

Local data is controlled by the user and retained until the user deletes it. Telemetry data is retained only as long as necessary (e.g. 30–90 days) if the user consented.

External services / third parties

We do not use external services that process private keys. Third-party APIs are only used to fetch public data (prices, token metadata, images).

Your rights

You can request access, deletion or restriction at any time by contacting support (see below).

Security

• No use of eval() or dynamic code loading from third-party servers.
• Content Security Policy (CSP) is configured restrictively; inline scripts are avoided.
• Please keep your browser and the extension up to date.

Contact & support

For questions or privacy requests please contact: support@top1.trade

Changes to this policy

We may update this privacy policy. Significant changes will be communicated clearly.