🔒 How Our Architecture Works
1. Wallet Connection (Phantom) — Read-Only Access Only
When you connect a Phantom wallet, we receive only your public wallet address
Private keys never leave your wallet — technically impossible under Solana’s cryptography
Phantom uses the standard Web3 connection flow — we cannot execute transactions without your explicit approval
A connected wallet gives BagSensei read-only access to balances and token lists
2. Wallet & Token Scanning
All information BagSensei displays comes from the public Solana blockchain
Anyone can view any wallet on public explorers — we use the same publicly accessible data
We do not store scanned wallets, transactions, or portfolios on our servers
The analytics layer runs in real time using public on-chain endpoints
Your browser handles the heavy logic — sorting, risk checks, token breakdowns, holder maps, etc.
3. Zero-Data Architecture
Your Browser → Public On-Chain Data
↓
Our backend never sees your wallet or your scansClient-side processing: risk scores, token parsing, distribution checks, and behavior flags run locally
Our API only provides generic metadata and routing — never wallet-specific data
We do not log addresses, do not create user profiles, and do not track scanning behavior
4. Future Accounts
Planned system: Sign-In with Wallet (message signature, no emails or passwords)
We will store only:
your public wallet address
UI preferences (theme, language, saved view settings)
No personal data
No KYC
No seed phrases
No access to funds
Accounts = convenience layer, not a surveillance layer
🚫 What We Cannot Do (Technically Impossible)
❌ Access your private keys ❌ Read your seed phrase ❌ Execute a transaction without confirmation ❌ Move, swap, or send tokens ❌ Track you across scans
✅ What We CAN Do
✔ Read public blockchain data ✔ Build analytics based on on-chain information ✔ Show token, LP, and wallet forensics ✔ Allow optional account preferences (future) ✔ Keep all wallet information local to your browser
🧩 Verifiability
Core logic is being prepared for open-source publication on GitHub
Anyone will be able to verify that we do not collect user data
Future smart contract modules will undergo independent audits
Last updated