X Privacy Policy
Effective date: October 28, 2026 (updated for Buy Load) · Applies to the X Wallet browser extension, its desktop view, the web wallet and the X Wallet Android app.
Summary
X Wallet is a non-custodial (self-custody) crypto wallet. Your keys, recovery phrase and password never leave your device, and we never sell your data. The wallet itself works without an account. Only when you choose an optional service (Buy & Sell with pesos, or Sell without BNB) does our server receive the details needed to complete that order, as described below.
Data stored on your device
- Secret Recovery Phrase and private keys: encrypted with your password (scrypt + XChaCha20-Poly1305) and stored only in your browser's extension storage.
- Wallet settings: account names and public addresses, selected network, custom networks and tokens, display currency, auto-lock setting, connected sites, and your transaction history list.
- Cache: recent prices, exchange rates and token logos, so the wallet loads faster and works when a price service is busy.
Removing the extension or choosing "Reset wallet" deletes this data from your device.
Data we collect
For normal wallet use: none. X Wallet has no user accounts, analytics, tracking pixels or advertising. The wallet downloads a public version file, token list and settings file from our website, which contain no information about you.
For the optional services below, our server receives only what is needed for that order:
Buy & Sell with pesos (optional)
When you buy or sell crypto for Philippine pesos in X Wallet, the order is handled by the X Wallet desk and the payment provider PayHub.
- Every order: your public wallet address, the coin and amount, the peso amount, the order reference, the time, and your IP address (for daily limits and abuse prevention).
- Buy: the payment method you pick (GCash, Maya or QRPh). You pay on the PayHub checkout page; your e-wallet or bank login and card details are entered there, never in X Wallet, and we do not receive them.
- Sell: where to send your pesos: bank or e-wallet, account or mobile number, account name, email and mobile number. Your wallet signs the order so nobody else can change where the pesos go. On this device, the wallet remembers these payout details to fill in the form next time; you can change them anytime.
- On-chain: the transfers between your wallet and the X Wallet desk are public on BNB Smart Chain, like any blockchain transaction.
Why we use it: to complete your order, send your coins or pesos, prevent fraud and abuse, handle support requests, and keep the records required for accounting and the law. Who receives it: PayHub and its payment partners, only to process the payment or payout. We do not sell it or use it for advertising. How long: as long as needed for these purposes and for our legal and accounting obligations. To ask about or correct your order data, contact us (below) with your order reference.
Third-party services
To show balances, prices and to send transactions, X Wallet connects directly from your device to the public services below. These requests include your public wallet address or the token contracts you hold, and your IP address is visible to the service, as with any website. We do not control these services; their own privacy policies apply.
| Service | Purpose | Data sent |
|---|---|---|
| Blockchain RPC nodes (BNB Chain, PublicNode, DeFiBit, 1RPC, Solana mainnet RPC, TronGrid, and your custom RPCs) | Balances, gas fees, broadcasting signed transactions | Public address, signed transactions |
| PancakeSwap smart contracts (via RPC) | Swap quotes and swaps | Token addresses, amounts, public address |
| Jupiter (jup.ag) and SunSwap (via TronGrid) | Swap quotes and swaps on Solana and Tron | Token addresses, amounts, public address, signed swap transactions |
| CoinGecko, Binance public API, DexScreener | Token prices, liquidity and volume, token and network logos | Token contract addresses |
| GeckoTerminal | Token price charts | Token contract and trading pair addresses |
| Trust Wallet assets (GitHub) | Token and network logos | Token contract addresses (in the image URL) |
| open.er-api.com | Fiat exchange rates (e.g. USD to PHP) | None |
| X Wallet relayer (walletadmin.revelx.io) | "Sell without BNB", "Send without BNB" and gas for "Sell to Peso": sends a small amount of BNB for gas when you choose it | Public address, token and amount; the payout token (sell) or the recipient address (send); your IP address (for abuse limits) |
| X Wallet Buy & Sell desk (walletadmin.revelx.io) | Prices, orders and order status for Buy & Sell with pesos | See "Buy & Sell with pesos" above |
| DingConnect (Ding) or Reloadly (Buy Load) | Sending prepaid load and promos to a PH mobile number when you use Buy Load | The mobile number, network, load amount and an order reference (no wallet keys) |
| PayHub (checkout and payouts) | Peso payments (GCash, Maya, QRPh) and payouts to your bank or e-wallet | Order reference and amount; for sells, your payout details |
| WalletConnect (Reown) relay | Connecting the web wallet to dApps on another device, when you scan a WalletConnect QR | End-to-end encrypted messages between the wallet and the dApp you approved |
| wallet.revelx.io | Latest version number (update notice), featured tokens, dApps and announcements | None (a plain file download; no address or wallet data is included) |
| powerpoolx.com | PPX token logo | None |
Websites you connect to
When you connect X Wallet to a website (dApp), that site can see the public addresses you approve and request signatures or transactions. Nothing is shared without your approval, and you can disconnect sites anytime in "Connected sites".
Permissions
- storage: save your encrypted wallet and settings on your device.
- alarms: auto-lock the wallet after the time you choose.
- Access to websites: let dApps detect and connect to X Wallet (like MetaMask), and fetch prices and blockchain data from the services listed above.
Security
Because X Wallet is self-custody, nobody (including the X Wallet team) can recover your funds if you lose your recovery phrase. We will never ask for your recovery phrase or password.
Children
X Wallet is not intended for anyone under 18.
Changes
We will post any changes to this policy on this page and update the effective date.
Contact
Questions about this policy? Reach the team through the official support channels listed on revelx.io.