ScarCity Labs ("Halo," "we," "us," or "our") operates the Halo Chrome extension and the website at scarcitylabs.io. This Privacy Policy explains how we handle information in connection with our services.
This policy applies to: (a) the Halo Chrome browser extension; (b) the scarcitylabs.io website and all subpages; and (c) any communications between you and Halo.
This policy does not apply to third-party services linked or connected to the Service, including Hyperliquid, Anthropic, and Polymarket. Each has their own privacy policy.
The following table describes every piece of data the Halo extension touches:
| Data Element | Where Stored | Sent to Halo? | Purpose | Retention |
|---|---|---|---|---|
| Anthropic API Key | chrome.storage.local (your device only) | Never | Authenticates AI API calls made directly to Anthropic from your browser | Until you delete it from Profile |
| Price Alerts | localStorage (your device only) | Never | Persistent alert storage across sessions | Until you delete them |
| Wallet Address | chrome.storage.local (your device only) | Never | Fetches your portfolio stats and trade history from Hyperliquid's public API. You enter this address manually. | Until you clear it from the Portfolio or Export panel |
| Extension Toggle State | chrome.storage.local (your device only) | Never | Remembers whether you have Halo enabled or disabled | Until extension is uninstalled |
| Live Price Data | Memory only (not persisted) | Never | Display in sidebar panels | Cleared when panel closes |
| Candle/Chart Data | Memory only | Never | AI chart analysis input | Cleared when analysis completes |
| Your Questions & Prompts | Memory only (conversation context) | Never | Sent directly from your browser to Anthropic's API | Cleared when panel closes |
| Trade Orders | Not stored | Never | Intercepted only to append builder fee tag; passed unmodified to Hyperliquid | Not retained |
| Wallet Address | Not accessed or stored | Never | Not currently accessed by Halo | N/A |
When you add your Anthropic API key in the Profile panel, it is saved using chrome.storage.local — a sandboxed storage area on your device accessible only to the Halo extension. It is not accessible to other extensions, websites, or Halo's servers.
When you use the Portfolio or Trade Export addons, your browser sends requests directly to Hyperliquid's public API (api.hyperliquid.xyz) using your wallet address. Halo never sees, stores, or logs this data. Your wallet address, account stats, and trade history go directly from your browser to Hyperliquid's API and are never transmitted through Halo's servers.
When you use AI features, your browser sends requests directly to Anthropic's API (api.anthropic.com) using your key. Halo's infrastructure is not in the path of this request. We never see, receive, store, or log your API key or your prompts.
Halo appends a builder address tag to trade orders submitted through the extension. This allows Hyperliquid's infrastructure to collect a 0.055% fee credited to Halo's on-chain builder address. This process involves no personal data transmission to Halo — it is handled entirely by Hyperliquid's smart contract infrastructure.
Blockchain transactions are publicly visible by nature. Any observer can see trading activity associated with your on-chain address. Halo has no special access to this data beyond what is publicly available.
Halo does not receive information about your trade size, position, P&L, or trading strategy from this process.
Our website is hosted on Vercel. Vercel may collect standard server logs including IP addresses and browser information as part of their infrastructure operations. This collection is governed by Vercel's Privacy Policy.
Halo does not operate its own analytics, tracking pixels, cookies, or user identification mechanisms on the website. We do not use Google Analytics, Meta Pixel, or any similar tracking technology.
The website uses Google Fonts, which may set a connection to Google's servers when you load the page. This is governed by Google's Privacy Policy.
| Service | What the extension sends | Their Privacy Policy |
|---|---|---|
| Anthropic api.anthropic.com | Your AI prompts and questions, sent using your own API key | anthropic.com/legal/privacy |
| Hyperliquid api.hyperliquid.xyz | Price data requests (public, no auth); trade orders with builder tag attached | hyperliquid.xyz |
| Polymarket gamma-api.polymarket.com | Public market data requests (no personal data) | polymarket.com/privacy-policy |
| Vercel Website hosting | Standard web request logs (IP, browser) when you visit scarcitylabs.io | vercel.com/legal/privacy-policy |
| Google Fonts fonts.googleapis.com | Font file requests (standard browser request) | policies.google.com/privacy |
We do not sell, rent, share, or monetize your data with advertisers, data brokers, or any third party for marketing purposes. Halo products are and will remain ad-free.
Because Halo does not transmit personal data to our servers, our attack surface is minimal. Data stored on your device (API key, alerts) is protected by Chrome's extension sandboxing, which prevents other extensions and websites from accessing it.
We recommend: (a) keeping your Anthropic API key confidential and not sharing it; (b) rotating your API key if you suspect it has been compromised; (c) keeping Chrome and the Halo extension updated; (d) using strong wallet security practices independent of Halo.
No system is 100% secure. We cannot guarantee the security of information stored on your device or transmitted over the internet.
Because Halo does not collect personal data on its servers, most GDPR rights (access, portability, erasure, rectification) can be exercised by you directly on your own device — you control your data entirely. To remove your API key, use the "Remove Key" button in the Profile panel. To remove your alerts, delete them in the Alerts panel or uninstall the extension.
If you have any GDPR concerns, contact us at the details below and we will respond within 30 days.
Halo does not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents have the right to know what personal information is collected — our answer is: nothing stored on our servers. You may exercise any CCPA rights by contacting us below.
You can delete all locally stored Halo data at any time by uninstalling the Chrome extension. This permanently removes your API key and all saved alerts from your device.
The Service is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has used the Service or provided personal information, please contact us immediately and we will take appropriate action.
When you use AI features, your browser sends requests directly to Anthropic's servers, which may be located in the United States or other jurisdictions. This transfer is governed by Anthropic's data processing terms and privacy policy. Halo does not independently transfer your personal data internationally because we do not store or transmit personal data on our own infrastructure.
All data stored by Halo lives exclusively on your device and is retained until you delete it or uninstall the extension. Halo has no server-side data to retain, delete, or archive.
We may update this Privacy Policy as Halo evolves, particularly as features like wallet connect are introduced. Material changes will be indicated by updating the version number and effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy. We recommend reviewing this page periodically.