Privacy / of the scanner

The scan is a public-key lookup, not a vault

VEIL Scan is built to avoid custody and wallet connect. It is not anonymous browsing of the chain. Pasting an address tells this server — and then an RPC node — which public key you are curious about.

Last updated 21 September 2026

What you send us

A public Solana address in a form POST navigation or JSON body. That value becomes a URL path (/scan/<address>) or an API payload. We do not ask for a signature, seed, or wallet session.

What we send onward

The same public key is included in JSON-RPC calls (getSignaturesForAddress, getTransaction) to SOLANA_RPC_URL or public fallbacks. Those operators can log queries. That is inherent to reading a public ledger through someone else’s RPC.

What we do not collect

No user accounts, no mailing list, no KYC, no wallet adapter metadata, no IP-to-identity product. We do not ask for cookies to sign you in. Hosting platforms may still emit access logs for HTTP requests.

No account, no wallet

There is nothing to sign up for. There is no “connect wallet” button. A site that demands an approval to “unlock a VEIL report” is not this product. See About.

Storage and logs

This MVP has no application database of reports. Each scan is computed on demand from live RPC (or from a sample fixture). On hosts with an ephemeral filesystem, local writes do not survive deploys or restarts — and we do not use the disk as a user store.

Operators of this website, CDNs, and RPC providers may retain request logs (path, time, IP as seen by the host, user agent). Those logs can include the address because it sits in the URL. Treat shared scan links as publications of interest in that public key, not as private notes.

What the ledger already did

Scanning does not make an address more public than the cluster already did. Signatures, counterparties, and memos were broadcast to validators. The report only restates them. If you need value transfer that does not publish sender, recipient, and amount, that is a shielded design — not a scanner. Read public vs ZK.

Third parties

Live scans depend on Solana RPC. If you self-host, point SOLANA_RPC_URL at an endpoint you have a contract with. Explorer links on the report open public Solana explorers; those sites have their own policies. Educational links to Solana and Zcash documentation are outbound references, not data shares of your scans.

Contact

This is an independent design concept, not a registered data broker. For how the product is allowed to speak about public fields, use Methodology and Terms.