Last updated 31 August 2026
What AddonPass processes
AddonPass processes public wallet addresses, sign-in records, addon and plan settings, subscription and payment records, webhook deliveries, basic security data about requests, and public Base transaction references needed to run and secure the product.
What the browser keeps private
Install link tokens are created in the subscriber's browser; only a hash is sent to AddonPass and stored on Base. Webhook secrets are created in the browser and encrypted before they are stored. Wallet private keys, seed phrases, and signing stay in the wallet you choose.
Sessions and security
Signing in uses a secure cookie that page scripts cannot read. Security controls may keep hashed network and browser fingerprints, rate-limit counters, audit events, and limited failure details; they never keep install links in analytics.
Public-chain data
Base addresses, transactions, balances, and payment history are public by design and stay visible on Base independently of AddonPass.