Toll extension: privacy

In short

The Toll browser extension shows facts about the coin whose page you are viewing. To do that it sends one thing: the address of that coin (or, on some sites, of its trading pair). It has no account, never touches your wallet, does not read what you type, does not track the pages you visit, has no analytics and no ads, and nothing it handles is sold or shared.

What it reads

On the coin pages of the supported sites (Pons, pump.fun, GMGN, DexScreener, Photon, Padre, Pools, Long, fomo) the extension reads the page’s web address, only to find the coin or pair address in it. It does not read the page’s text, forms, cookies, your wallet or your keystrokes. On every other website it does not run at all.

In the toolbar popup you can paste a coin address or a coin link yourself; that address is used the same way.

What it sends, and to whom

• t0ll.xyz (Toll): the coin’s address, to get its check. For a Robinhood Chain coin it then asks for who holds it now, with the coin’s address and its launch block number (a number from the first answer).
• api.dexscreener.com (DexScreener’s public API): on DexScreener, Photon and Padre the page address names a trading pair, not the coin, so the pair’s id is sent to DexScreener to learn which coin it is.

Nothing else leaves your browser. The requests carry no cookies, no wallet address and no list of the pages you visited. The extension talks to no other service.

What our server sees

Like any website, t0ll.xyz receives your IP address with each request, along with your browser’s usual request details. Our server uses the IP address only to answer the request and, for about a minute and in memory only, to limit how many checks one address can ask for. We do not store it, link it to the coins you check, or use it to track you.

Our host, Railway, may keep its own standard request logs (which include IP addresses) as part of running the service; we keep no copies of our own. DexScreener receives your IP address with the pair lookup in the same way, under its own privacy policy.

What it keeps on your device

• Two display choices, in the browser’s extension storage: whether the card is folded (per site) and whether it is small or wide.
• Recent answers, in session storage, for about two minutes, so the same coin is not asked for twice. They are cleared when the browser closes.

Neither is ever sent anywhere. Removing the extension removes both.

What it never does

• No account and no sign-in.
• No access to your wallet, no transactions, no trading, no payments.
• No reading of keystrokes, forms, page text or cookies.
• No browsing history and no record of which coins you looked at.
• No analytics, no ad trackers, no remote code.
• Nothing sold, rented or shared with anyone, and nothing used for any purpose other than showing the check.

Permissions

• storage: the two display choices and the two-minute answers above.
• t0ll.xyz: the check itself.
• api.dexscreener.com: turning a pair into its coin on DexScreener, Photon and Padre.
• The supported trading sites: to show the card on their coin pages. No access to all websites, no tabs permission.

Changes

If the extension starts sending or keeping anything new, this page changes first and the date above moves. The website’s own policy is at t0ll.xyz/privacy.

Contact

• On X: @Tollxyz_. Send a direct message.
• Website: t0ll.xyz.

Information only. Not financial advice.