LUX8 Wallet — Privacy Policy

LUX8 Wallet is a self-custodial Solana wallet. There are no accounts, no backend storing your data, and no way for us to reach your funds. This page describes exactly what the app does with information — including the parts that are unavoidable.

1. What we never collect

No account, no sign-up, no email. The app never asks who you are.
No analytics, no tracking, no advertising identifiers, no cookies.
No personal data: no name, address, phone number, document scans, or KYC of any kind.

2. Your keys and recovery phrase

Your recovery phrase and private keys are generated on your device and never leave it.
The phrase is encrypted with a password you choose (PBKDF2-SHA256, 310,000 iterations, then AES-GCM) and stored locally — in the browser's storage on the web version, or in the iOS Keychain in the native app.
We never transmit, back up, or see your phrase or keys. This also means we cannot recover them for you. If you lose both your password and your recovery phrase, no one — including us — can restore access to that wallet.

3. What leaves your device, and where it goes

To show balances and submit transactions, the app has to talk to the Solana network. That traffic goes through our proxy at sol.stake-manager.net, which forwards it to infrastructure providers. The following is visible to the receiving service:

Your wallet address — reading balances, stake accounts and transaction history. Seen by our proxy and the RPC provider.
Signed transactions — broadcasting to Solana. Seen by our proxy, the RPC provider, and then by the public blockchain.
Token mint addresses and swap parameters (amounts, tokens, your address) — fetching prices and building a swap route. Seen by our proxy and Jupiter.
Your IP address — unavoidable in any network request. Seen by our proxy and our CDN, Cloudflare.

We use the proxy specifically so that API keys stay on our server and are never shipped inside the app. A side effect is that these requests pass through our infrastructure. Those requests land in the standard nginx access log: client IP, timestamp, the request line, response code and size, referrer and user-agent. Request bodies are not logged. Logs rotate daily and are deleted after 14 days. There is no application log, no user database and no analytics. Cloudflare, which fronts these requests, keeps its own logs under its own policy.

Swap orders and our logs. Building a swap requires your wallet address: Jupiter needs to know who will sign the transaction. That address therefore reaches Jupiter, and once you sign, the swap becomes a public transaction on the Solana blockchain — neither of those can be avoided by any wallet.

What we changed on our side: this request is now sent as a POST body instead of a URL. Our proxy's access log records URLs, not request bodies, so your address is no longer written into our logs. It is still visible to Jupiter, and still public on-chain.

Note on the blockchain itself: Solana is a public ledger. Every transaction you make — addresses, amounts, timestamps — is permanently public and is not something either you or we can delete.

4. Third parties

Jupiter — token prices and swap routing.
RPC providers — reading chain state and broadcasting transactions.
Cloudflare — serving the app and proxying our traffic.

We do not sell, rent, or share data with anyone for marketing. We have nothing to sell: there are no user records.

5. Children

The app is not directed at children under 13, and we knowingly collect no data from anyone, of any age.

6. Changes

If this policy changes, the date at the top changes with it. Material changes will be noted in the app's release notes.

7. Contact

Questions about privacy: [email protected]. Support: lux8.net/wallet-support.html.