Noidium Privacy Policy

Applies to the Noidium browser extension (the wallet). Published at https://noidium.com/privacy. Last updated: 5 November 2026 (Noidium 0.5.7).

Noidium is a self-custody wallet for the Parano1d network. This policy explains, in plain words, what the extension keeps on your computer, what it sends, to whom, and why. Short version: your keys never leave your device, we do not track you, and we never sell anything about you.

What stays on your computer

• Your wallet. Your recovery key (the secret that controls your funds) is created on your computer and stored only there, encrypted with your password (Argon2id and AES-256-GCM). We never receive it and cannot recover it.
• Your password is never stored and never sent anywhere. It only unlocks the wallet on this computer.
• Wallet bookkeeping: your accounts and their public addresses, your recent activity, the addresses you paid before (the address book), the websites you connected, the transactions on their way to the network (the "outbox") and what each pending transaction pays to whom. These are kept encrypted with a key that only exists while the wallet is unlocked. What the wallet needs while it is locked stays readable: the public address of the account in use, your settings, the vault's public format details, unreadable tags of the websites you connected, the ids and coin numbers of pending transactions (no amounts or recipients), the websites you turned encrypted messages on for with your public message keys, and how many wrong passwords were typed recently (to slow down guessing: one try at a time, a growing wait of at most one hour).
• Clipboard. When you copy your address or your recovery key, it goes to your computer's clipboard, where other apps can read it. Noidium offers to clear the recovery key from the clipboard after 60 seconds while it is open. Nothing is sent anywhere by copying.
• While the wallet is unlocked, the key is held in the browser's session memory and is erased when the wallet locks or the browser closes. An unlocked wallet locks itself after the idle time you chose, and at the latest 4 hours after you unlocked it. Never leave an unlocked wallet unattended: anyone at your computer can use it until it locks.
• Encrypted messages. A website you turned encrypted messages on for can have Noidium lock and unlock your messages after you allow it, until the wallet locks (or, if you choose so in Settings, for at most 60 or 15 minutes); after every lock, and after you switch accounts, Noidium asks again. That permission is kept in session memory only and is erased when the wallet locks or the browser closes.

You approve every transaction. Noidium never signs or sends anything on its own: every transaction, including a coin split (paying yourself to turn your balance into a few coins), is shown to you with its amounts and network fee and is sent only after you approve it.

You can remove all of it by removing the extension (keep your recovery key first: without it, the funds are lost).

What Noidium sends, and why

Noidium needs a connection to the Parano1d network to show your balance and to send your transactions. It talks to:

1. The Noidium wallet API (api.noidium.com), operated by us, to:
   • read the balance, coins and pending payments of the account you are using, and its transaction history (this sends its public address);
   • prepare a transaction you started, and send it to the network after you approved it (this sends the transaction, which becomes public on the Parano1d blockchain once it is mined);
   • check the status of your transactions (this sends their ids);
   • when "Fast" proving is on (the default), compute part of a transaction's proof on our server. The request is masked: it contains no key and cannot be used to sign anything. Choose "Private" in Settings to prove on your own computer instead (slower).
2. The Noidium media server (media.noidium.com) to load pictures: NFT images, token logos and the wallet's artwork. No cookie, identifier or referring page is sent.
3. The website you choose to connect (noidium.com) learns your public address after you approve the connection, and receives the results of requests you approve (for example a transaction id). It never receives your key.

Like any internet request, these reach our servers with your IP address and the time of the request. Our servers can see that the addresses of your accounts are used from the same browser, so they could link them; if you need accounts that cannot be linked, use separate browser profiles or devices.

Noidium sends nothing else: no analytics, no tracking, no advertising identifiers, no crash reports, no browsing history. It does not read the websites you visit, except that on noidium.com it adds the connection that lets the site ask your wallet for approvals.

What our servers keep

• No access log of wallet requests in the application itself; rate limits keep IP addresses (or /64 prefixes) in memory for minutes, and recently relayed payments in memory until they are confirmed.
• Error logs may contain the requested path (which can include a public address or transaction id) and are kept for at most 14 days.
• Cloudflare, which serves our domains, processes request data (including IP addresses) under its own policy as our provider; we do not turn on Cloudflare's request logging (Logpush) for these domains.

Public blockchain data (your transactions) is public by nature and cannot be deleted by anyone.

Third parties

• Cloudflare, Inc. — hosting, content delivery and security for noidium.com, api.noidium.com and media.noidium.com.
• Google (Chrome Web Store) — distributes the extension and updates it.
• We do not sell, rent or share your data with anyone else, and we do not use it for advertising, credit or lending.
• Noidium's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Children

Noidium is not intended for children under 16 and we do not knowingly collect data from them.

Your choices

• Use "Private" proving to keep proof work on your computer.
• Disconnect a website in Noidium's settings at any time.
• Remove the extension to delete everything it stored on your computer.

Changes

If this policy changes, the new version is published at this address with a new date, and material changes are announced on noidium.com before they take effect.

Contact

Questions about privacy: support@noidium.com.