Privacy
Last updated 8 September 2026
This is a description of what the site actually does, written by the people who built it. It is short because there is not much to describe.
There is no account
Chroma has no sign-up, no login, no password and no profile. We do not ask for your name, your email, your date of birth or a document. Nothing you do here is filed under an identity, because there is no identity to file it under.
We do not run analytics
No Google Analytics, no Segment, no Mixpanel, no advertising pixel, no session recorder, no heatmap. We do not know how many people visited yesterday and we are fine not knowing.
Loading a page
Opening a Chroma page contacts one host: this server. The market list, the price data and the asset logos are fetched by the server on your behalf, so the places that data comes from see this deployment's address and never yours. That was a deliberate change; the browser used to call one of them directly.
The site is hosted on Vercel, which keeps ordinary server logs — the request, the time, an IP address, the browser string. That is the same record any web server keeps, we do not build anything on top of it, and we do not join it to a wallet.
Fonts are served from this domain, so loading a page does not call Google Fonts either.
Connecting a wallet
The connect dialog is Reown's AppKit, and pressing Connect is the moment the page starts talking to someone other than us. Your browser reaches api.web3modal.org and pulse.walletconnect.org, and if the Coinbase Wallet option loads, cca-lite.coinbase.com. Those requests carry your IP address and connection metadata to Reown and Coinbase under their own privacy policies, not ours. We turned off every AppKit feature that could be turned off, including its analytics, email login and social login. One beacon from the Coinbase SDK we have not managed to remove.
If none of that appeals to you, the site works with an injected browser wallet without opening that dialog at all.
Cookies
One, set by the wallet library, remembering which wallet you connected so a refresh does not log you out. It contains no identifier we assigned and we do not read it for any other purpose. There is no consent banner because there is nothing to consent to.
Your wallet address
When you connect, the page reads your address so it can show your balances and positions. It is held in the browser tab and used to build the transactions you sign. We do not store it, and we have no database that would hold it if we wanted to.
Be clear-eyed about what that does and does not protect. Everything you do on chain — every supply, borrow, repay and liquidation — is public, permanent and attached to your address forever, and it would be exactly as public if this site did not exist. We cannot delete a transaction, and neither can anyone else.
If you email us
Then we have your email address and whatever you put in the message, in an ordinary mailbox, for as long as the thread is useful. Nothing more happens to it.
We do not sell anything about you
There is nothing to sell. We hold no profile, no behavioural record and no contact list, we share nothing with advertisers or data brokers, and if a court ever compelled us to produce records, what exists is the server logs described above.
Changes
If this changes, the date at the top changes with it. If a change is material — a new third party, anything resembling tracking — we will say so publicly rather than quietly editing this page.