United Starship - Privacy Policy
United Starship is an open-source Manifest V3 Chrome extension published by Callister Inc: a full-control EVM wallet that connects to the networks and JSON-RPC endpoints you configure. Its guiding principle for privacy is simple: everything it stores stays on your own device, and the only thing it sends over the network is a JSON-RPC request to the endpoint you configure yourself.
Summary
United Starship does not collect, transmit, sell, or share any personal data. There is no analytics, no telemetry, no tracking, and no developer-controlled server involved anywhere in its operation.
What data exists, and where it lives
All of the extension's data is stored locally in chrome.storage.local on your device.
None of it is sent to the developer or to any third party.
The data consists of:
- Your encrypted vault (the HD wallet's Secret Recovery Phrase and any private keys you import).
- Your configured networks (name, RPC URL, chain ID, native symbol).
- Any ERC-20 tokens you add (address, symbol, decimals, name).
- Your per-site connection permissions (which origins you connected and the account you shared with them).
Of these, only the vault is encrypted. Your public account metadata (account names, addresses, and which account is active), networks, tokens, and site permissions are stored as ordinary local data. All of it remains on your device.
How your keys are protected
You either create a new BIP-39 HD wallet - a 12- or 24-word Secret Recovery Phrase you back up once - or import an existing wallet by Secret Recovery Phrase, and you can also import standalone accounts by private key.
The Secret Recovery Phrase and any imported private keys are held in one vault encrypted with AES-256-GCM, using a key derived by PBKDF2-SHA-256 with 310,000 iterations from a passphrase you choose (minimum 8 characters).
The encrypted vault is written only to chrome.storage.local on your device and is never transmitted anywhere.
The decrypted seed and private keys exist only in the ephemeral memory of an offscreen document while the wallet is unlocked; they are never held by the service worker and are lost when the browser session ends.
Your own Secret Recovery Phrase restores your accounts; there is no hardware wallet, no cloud sync, and no developer-run cloud recovery service, so if you lose both your passphrase and your Secret Recovery Phrase, no one can recover the wallet for you.
Network activity
The only runtime network egress the extension performs is JSON-RPC POST requests to the RPC URL(s) you configure. The extension contacts no other destination. When you view balances, add tokens, switch networks, or send transactions and messages, those requests go to your configured RPC endpoint and nowhere else. Because you choose the endpoint, it may be a plaintext http address (for example a localhost node) or an https address (for example a remote fork). The extension itself sends nothing to any developer-controlled server.
What the extension does NOT do
- No analytics, telemetry, or usage tracking.
- No price, portfolio, token-list, phishing, scam-scoring, or transaction-simulation service.
- No hosted wallet API and no external detection service.
- No fetching of remote images or NFT metadata. NFT artwork is rendered only when it is stored on chain (a
data:URI read through your own RPC); an image hosted off chain is never requested and never rewritten to a public gateway, so no third-party host learns your address or IP. - No sale of data, and no sharing of data with third parties.
- No collection or transmission of personal or financial information of any kind.
Open source
United Starship is open source under the MIT license. You can read the full source, verify these claims, and see exactly what the extension does at https://github.com/Callister-Inc/united-starship.
Publisher and data controller
United Starship is published by Callister Inc.
Because the extension collects and transmits no personal data at all, Callister Inc processes no personal data as a controller: there is no server, no account, no analytics endpoint, and no data set to access, export, or delete.
All of your data stays in chrome.storage.local on your own device, under your own control.
Contact
Questions or concerns about United Starship can be raised with Callister Inc on the project's GitHub issue tracker: https://github.com/Callister-Inc/united-starship/issues.
Changes to this policy
If this policy changes, the updated version will be published at this URL with a new effective date.