your privacy
is important to us.

veriumlabs.com is a public, read-only documentation site. app.veriumlabs.com is an interface to the XRP Ledger; some of its features require connecting a supported wallet application (currently Xaman or Joey). You may optionally connect a wallet to view personalized on-chain data such as your XRP balance and token holdings — see Section 2 for details. Wallet connection is voluntary and is not required to read any documentation, whitepaper, or marketing content.

We do not collect personally identifiable information (PII). The Service does not request, prompt for, or store your name, email address, phone number, mailing address, date of birth, government identification number, or any other traditional identity data. The only situation in which PII reaches us is if you voluntarily send it — for example, by emailing [email protected] with an inquiry. In that case the email address is used solely to respond to you and is not added to any marketing list, profile, or third-party database.

You may connect an XRPL wallet using a supported wallet application — currently Xaman or Joey (via WalletConnect). The following applies to either:

• • The Service receives your XRPL public address — the same r-prefixed identifier that is visible to anyone you transact with on the public ledger — and, if you enable push signing, a Xaman-issued push token retained for up to 30 days. We do not receive or store your private keys, seed phrase, signing secret, or Xaman PIN. Those remain inside the Xaman app on your device.
• • Sign-in uses Xaman's PKCE flow, or a WalletConnect pairing when you connect with Joey. Xaman, operated by XRPL Labs, is an independent third party with its own privacy policy at xaman.app/privacy. Joey and WalletConnect are likewise independent third parties governed by their own policies. We are not responsible for what they collect.
• • Once connected, the Service may query publicly available on-chain data tied to your address — XRP balance, token trustlines, account info — to render personalized views. This data already exists on the public XRP Ledger and is visible to anyone who looks it up.
• • Your wallet address is stored in your browser's localStorage (key veriumx_wallet_address on veriumlabs.com, verium_dex_wallet on app.veriumlabs.com) so the connection persists across page reloads. Your address is sent to Xaman when a signing payload is created, to XRPL nodes to read public on-chain data, and — if you use Odin — to our AI model provider as part of page context. It is not sold, shared for advertising, or used for profiling. You can clear it at any time by clicking Disconnect or by clearing site data in your browser.
• • We do not link your wallet address to any off-chain identity, name, email, IP address persistently, or marketing identifier. We do not sell or share wallet addresses. We do not use them for advertising, retargeting, or behavioral profiling.

A wallet address is a pseudonymous on-chain identifier, not a name. We treat it as a technical identifier for the duration of your session, not as personal data linked to you. The XRP Ledger is permissionless and public — transactions and balances tied to any address are visible on-chain to anyone, regardless of any platform.

We collect data that your browser sends whenever you visit the Service ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type and version, the pages of the Service that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.

Log Data is used for rate limiting, abuse prevention, debugging, and security incident response. It is retained for up to 30 days at the edge (Cloudflare) and up to 90 days at the origin server.

All traffic to the Service is encrypted in transit via HTTPS. The Service uses Cloudflare for DDoS protection and bot management.

The Service does not set tracking cookies, advertising cookies, or analytics cookies. When you connect a wallet on app.veriumlabs.com, the Service sets strictly-necessary first-party authentication cookies (verium_auth and verium_auth_csrf) so your session persists and to protect against cross-site request forgery. Cloudflare may set strictly-necessary cookies for bot detection and DDoS protection. You can disable these in your browser, though doing so may affect site reliability.

The Service does not currently use third-party analytics providers such as Google Analytics. Our usage statistics are derived from Cloudflare and origin server logs (Section 3) for operational and security purposes only.

The Service relies on the following third parties to operate:

• • Cloudflare — CDN, DDoS protection, bot management. Sees IP, user agent, and request path.
• • Hosting provider — origin server. Sees the same request metadata.
• • Xaman (XRPL Labs) and Joey / WalletConnect — wallet connection and transaction signing. Receive your public address and the unsigned transactions you are asked to approve.
• • XRPL nodes — to read public on-chain data and submit signed transactions.
• • AI model providers (currently Anthropic and xAI) — power Odin. Receive your message and the page context it is answering about, which may include your public wallet address and on-chain balances. They do not receive keys.
• • IPFS and NFT metadata gateways (ipfs.io, Pinata, Lighthouse, xrp.cafe) — to fetch NFT images and collection data.

These providers have access only to the Log Data necessary to deliver the Service and are obligated not to repurpose it.

The Service does not send email newsletters or marketing communications. If you enable push signing in Xaman, a Xaman-issued push token is stored (Redis key xaman_ut:{wallet}) so signing requests can be pushed to your device; it is used for that purpose only. If you contact us at [email protected], your email address is used only to respond to your inquiry.

Information processed by the Service may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By using the Service, you consent to this transfer.

Our Service may contain links to other sites — including social media platforms, wallet providers, and external block explorers. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

If you are a US resident, you may have rights under your state's privacy laws, including the right to request a copy of personal data we hold about you, the right to request deletion, and the right to opt out of any sale or sharing of your personal information. We do not sell or share personal information.

To exercise these rights, contact [email protected]. We respond within 30 days.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. Changes are effective when they are posted on this page.

If you have any questions about this Privacy Policy, please contact us:

• • By email: [email protected]
• • Verium Labs · Delaware, United States