What the extension knows, and who it tells.

Nothing. The extension has no analytics, no telemetry, no crash reporting and no third-party scripts. It does not know who you are, and it does not try to.

Orders you track (order id, pair, amounts, status, the venue's one-time deposit address), the addresses you choose to save with the labels you give them, and the last pair you used.

All of it lives in the extension's own storage in this browser profile. It is never synced, uploaded or shared. Removing the extension deletes it.

Requests to one host: app.darkroute.exchange. These are the same requests the web app makes — a quote request (pair, amount, addresses), an order request when you ask for a deposit address, and status checks for the orders you track.

The app keeps an order record (ids, amounts, status). No names, no emails, no KYC. Its own privacy terms are on the docs page.

If you signed in on the app with a wallet, that session cookie accompanies the extension's requests so your fee tier applies. The extension cannot sign, cannot connect a wallet and cannot start a session by itself.

The extension runs on app.darkroute.exchange only, where a small script lets an order opened on the site be tracked in the toolbar and hands the site's saved addresses and recent orders to the extension. Nothing flows the other way.

The context menu item “Send here with DarkRoute” receives only the text you selected, at the moment you choose the item. No page is scanned.

Ask for access to all sites. Hold keys. Sign transactions. Load code from the network. Track you across pages. Sell, share or profile anything.

If a future version needs a new permission, Chrome asks you before it installs and this page is updated first. The version this policy describes is printed on the extension page.

Questions go to @DarkrouteRH on X.