Privacy

The short version

Husk has no accounts, no analytics, no tracking and no crash reports. Your keys are created on your device, encrypted with your password, and never sent anywhere. We hold no funds and keep no record of you.

A wallet still has to talk to the Solana network and to price and swap services. Those requests are listed below, with what each one can see.

On your device

The extension stores these in your browser's extension storage, on your machine only:

• Your recovery phrase and burner keys, encrypted with a key derived from your password (PBKDF2, 4,000,000 rounds, then AES-GCM). Your password is never stored.
• Wallet names, addresses and pictures, your settings, and the list of sites you connected.
• Addresses each wallet has sent to, so Husk can warn you about a lookalike address. Kept per wallet, never shared, and clearable in Settings.

While the wallet is unlocked, the decryption key sits in memory-only browser storage and is cleared when it locks or the browser closes. Removing the extension deletes all of it.

What leaves your device

The Solana network. To read balances and send transactions, the extension calls a Solana RPC node. By default that is Husk's node at rpc.huskwallet.com, which forwards to our RPC provider, Helius; if it is unavailable, public Solana nodes are used instead. Any RPC node sees your IP address, the addresses you look up and the transactions you send. Husk's node stores and logs none of it; Helius handles requests under its own privacy policy. You can point Husk at your own node in Settings, and then none of these requests go through us.

Jupiter (lite-api.jup.ag) provides prices, token names, token search and swaps. Price and name lookups send token mint addresses, not your address. A swap quote sends the tokens and amount. Building a swap sends your wallet address, because the transaction has to be made for it. Price lookups can be turned off in Settings.

Token logos load through wsrv.nl, an image cache, so the person who made a token does not see your IP address when its logo appears. The common tokens' logos are built into the extension and load from nowhere.

That is the complete list. The extension sends nothing to Husk except RPC requests through Husk's node, and nothing at all to any analytics or advertising service.

Sites you connect

A website learns a wallet address only after you approve the connection, and only for the wallets you pick. Every signature is a separate approval. You can see and disconnect sites in Settings, and Husk forgets sites you have not used in 90 days by default.

huskwallet.com

The website sets no cookies and runs no analytics. Fonts and images are served from our own domain. It is hosted on Cloudflare, which, like any host, processes your IP address to deliver the page.

Changes and contact

If this policy changes, this page changes, with the date at the top. Questions: @huskwallet on X.