grifo

GRIFO / PRIVACY

Your view. Your data.

A clear account of what Grifo reads, keeps, and sends.

EFFECTIVE 23 OCTOBER 2026

Effective 23 October 2026

Grifo is a Chrome extension that reads the page you are on, keeps your names for wallets, streams Robinhood Chain launches and trades from a wallet kept in your browser. Most of what it does happens on your device. This page lists everything it reads, keeps and sends.

What Grifo reads

The page you open it on

When you open Grifo from the toolbar or press its shortcut, it reads that tab once: visible text, link targets, meta tags and the values of text fields, never password fields. It keeps the contract addresses it finds and a short piece of text around each until the browser closes.

Sites you turn on

On each site you turn on in Settings, and allow in the browser's own prompt, Grifo reads the pages you visit to draw your labels next to matching addresses and X handles. On X, Telegram Web and Discord it also keeps posts and messages that come from an account you watch or that name one of your keywords or a contract address, and on X profiles it notes the name and bio each time they change. All of this stays in your browser. Grifo reads no other site.

What Grifo keeps on your device

  • Your labels, with their notes, colors and whether you watch or share them.
  • Settings, alert keywords, sites you turned on and your trading limits.
  • Domain registration facts for up to 300 domains, refreshed after a day.
  • Up to 300 feed items and the X name history you collected.
  • Your trading wallet's private key, encrypted with your passphrase (PBKDF2 and AES-GCM). While unlocked, the key is held in memory only and is cleared when the browser closes or the unlock time ends. Grifo never sends the key anywhere.
  • Your trades, positions, sniper and auto sell rules.
  • Your sign in token, if you sign in.

What Grifo sends, and to whom

Domain registries

To show how old a site is, Grifo asks the registry that runs its domain, over RDAP. It sends the registrable domain only, never the page address, and fetches IANA's list of registries from data.iana.org at most once a week. When no registry is listed, the lookup goes to rdap.org.

Robinhood Chain

Wallet balances, quotes, the transactions you approve and the activity of wallets you watch are read from Robinhood Chain's public RPC. Watching a wallet means its address is part of those queries.

Grifo's server

  • The launch feed is fetched without anything about you.
  • About once a minute the extension asks the server which of its features are open. The request carries nothing about you.
  • When you inspect an address, Grifo sends it, and for a Pons coin its creator's address too, to look up its token, holders and launches. The same lookup runs automatically for the first launches shown in your feed, and for a Robinhood Chain address named in an X profile's bio on a site you turned on.
  • Community labels are looked up for the addresses shown in the popup and the panel. You can turn this off in Settings.
  • If you sign in, your wallet address is known to the server from the message you sign. Labels you choose to share are published with your address, and your votes are recorded against it.
  • A label backup is encrypted in your browser with a passphrase you choose. The server stores only that encrypted copy and cannot read it. You can delete it from Settings.
  • If you watch X accounts while signed in, their handles are sent so the server can fetch their latest posts from its X data provider, when one is set up.

The server runs on Vercel and stores shared labels, votes and encrypted backups in a Neon Postgres database. As with any web request, these services see your IP address.

What Grifo does not do

  • No analytics, advertising, tracking or crash reporting.
  • It does not sell, share or transfer your data, or use it for anything other than the features above.
  • It loads no code from the internet. Everything it runs ships in the extension.

Removing your data

Delete labels from the Labels tab, unshare a shared label from its editor, delete your backup from Settings and remove the trading wallet from Wallet settings. Removing the extension deletes everything it kept in your browser. Shared labels you did not unshare stay public under your address.

Grifo's use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements.