What Nullpath sees, and what it keeps

Short version: we read public blockchain data for the wallet you sign in with, analyse it in your browser, and keep nothing.

How a scan works

• You connect a wallet and sign a text message. The signature proves you control the wallet. It is not a transaction.
• Our server checks the signature and gives your browser a session cookie for 30 minutes.
• During that session, our server fetches that wallet's public transaction history from our data provider and passes it to your browser. It can also fetch a few wallets your wallet interacted with, and nothing else.
• If you use Before you send, our server looks up the address you pasted and returns only a verdict (exchange, deposit address, your own wallet or brand-new), never its transactions. If you sign in with several of your wallets to compare them, each one is proven with its own signature.
• Your browser computes the score and the map. Results are kept in your browser's session storage so a reload doesn't rescan, and cleared when you close the tab.

What we store

Nothing about you. No account, no database of wallets, no scan results, no email. The checklist ticks in your privacy plan are saved only in your own browser.

What our providers may see

To read the blockchain we use a Solana data provider (Helius) and a public .sol domain lookup service. They receive the wallet addresses being looked up from our server, not your IP address. Our hosting provider (Netlify) keeps standard technical logs such as IP addresses for security, under its own policy.

No tracking

No advertising trackers, no third-party analytics, no fingerprinting. The site loads its fonts and scripts from its own domain.

Limits

Nullpath is an educational tool. Its results are estimates based on public data and known exchange addresses, and may be incomplete or wrong. It does not provide legal, tax or financial advice.