Akoya Privacy Policy
Last updated: 2026-10-15
Akoya is an open-source, self-custodial browser extension wallet for Pearl (PRL), published by PRLFlipBTC. This policy explains exactly what data the extension handles. The source code that implements everything below is public at https://github.com/akoya-wallet/akoya-extension.
Summary
- We do not collect, receive, store, sell or share any of your data. PRLFlipBTC operates no server that the extension talks to.
- There is no analytics, telemetry, advertising, tracking or crash reporting.
- Your recovery phrase and private keys never leave your device.
Data stored on your device
| Data | Where | Protection |
|---|---|---|
| Recovery phrase / seed and optional BIP39 passphrase | chrome.storage.local | Encrypted with your password (Argon2id + AES-256-GCM). Never transmitted. |
| Wallet name, network, derivation mode, account public key (xpub) | chrome.storage.local | Not encrypted. Public data: it cannot spend funds, but reveals balances and history to someone with access to your browser profile. |
| Settings (language, auto-lock, RPC nodes, block explorers) | chrome.storage.local | Not sensitive. |
| Addresses of mining pools that paid you | chrome.storage.local | Public blockchain data, used to label mining income. |
| Unlocked session (wallet id and xpub) | chrome.storage.session | Memory only, cleared when the browser closes or the wallet locks. |
Uninstalling the extension or using Settings → Delete this wallet removes this data from your device.
Network requests
The extension only connects to:
- The Pearl RPC node you choose (by default the official Pearl Blockbook servers blockbook.pearlresearch.ai and blockbook.testnet.pearlresearch.ai, operated by Pearl Research Labs, not by us). To show your balance and history and to send PRL, the extension sends that node your account public key (xpub) and addresses, and broadcasts transactions you have signed. The node can therefore see your addresses, balances and transactions. It never receives your recovery phrase, private keys or password. You can switch to, or run, your own node in Settings → RPC node.
- A block explorer, only when you click a "View in explorer" link. That opens a normal browser tab at the explorer you selected (by default explorer.pearlresearch.ai) for that transaction or address.
Nothing else is contacted. The extension does not use cookies and does not load remote code.
Permissions
- storage: keep the encrypted wallet and your settings on your device.
- Access to blockbook.pearlresearch.ai / blockbook.testnet.pearlresearch.ai: talk to the default Pearl RPC nodes.
- Optional access to other https:// sites: requested only when you add your own RPC node, and only for that one site.
Children
Akoya is not directed to children under 13 and does not knowingly process their data.
Changes
Changes to this policy are published in the source repository and on https://akoyawallet.app/privacy/ with a new "Last updated" date.
Contact
[email protected] — for security issues, please use private vulnerability reporting: https://github.com/akoya-wallet/akoya-extension/security/advisories/new