Your data, kept minimal

• Your wallet address. When you connect a wallet, you sign a message once. This issues a scoped device token that identifies your wallet to the backend so earnings accrue to you. We never see, request, or store your private keys or seed phrase.
• Impression events. To pay you honestly, the extension measures how long an ad is actually visible and sends anti-fraud events (a heartbeat while visible, and a one-time event when a view is credited), tied to your wallet and the campaign shown.
• Earnings and withdrawals. Your accrued balance and withdrawals are recorded to pay you. On-chain withdrawals and balances live on Robinhood Chain and are public by nature of any blockchain.
• Minimal technical data. The backend applies basic rate limiting (for example, per-wallet and per-IP) to prevent abuse. We do not build advertising profiles.

• Your browsing history, the content of the pages or tweets you view, your keystrokes, or your messages.
• Your name, email, phone number, or any government identity (the wallet address is the only identifier).
• Your private keys or seed phrase. The extension never has access to them.

• On X (x.com / twitter.com), the extension injects a small ad ticker at the top of the page and offsets X's own top bars so nothing is hidden. It reads only what it needs to place the ticker; it does not read your timeline content.
• The ad itself is plain text and a link. It cannot run code, inject terminal sequences, or interfere with Claude or X. On any network failure it degrades silently.
• You earn per verified impression (visible time), not per click. No clicking is required.

• Kickbags backend (Supabase). The extension requests an ad and records impression events. This is what tells the server you saw an ad so it can credit you.
• kickbags.xyz. The extension fetches your earned balance to show it to you.
• Robinhood Chain. When you withdraw, the transaction settles on-chain and is publicly visible, like any blockchain transaction.
• We do not send your data to advertisers or any third-party analytics or ad network.

• Storage. To save the scoped device token for your connected wallet on your device.
• Access to kickbags.xyz. To read your earned balance.
• Access to the Kickbags backend (*.supabase.co). To request ads and record verified impressions.
• Run on x.com / twitter.com. To place the ad ticker at the top of the page.

We do not sell your data. We do not share it with advertisers or data brokers. Advertisers receive aggregate campaign delivery (for example, how many verified views their campaign got), never your personal identity.

We keep impression and earnings records for as long as needed to operate the product, reconcile payments, and prevent fraud. You can disconnect the extension at any time from its popup, which removes the device token from your browser. On-chain data cannot be deleted, as it is inherent to public blockchains.

Payouts are authorized by signed, on-chain-verified withdrawals against your cumulative balance; funds sit in per-campaign escrow with no shared pool. The extension holds only a scoped device token, never your keys. Note that a security audit and a move to multisig / timelock are still in progress; we document open risks rather than hide them.

Kickbags is not directed to children under 13 and we do not knowingly collect their data.

We may update this policy as the product evolves. Material changes will be reflected here with a new "last updated" date.

Questions about privacy? Reach us on X at @KickbagsAds or on Telegram at t.me/KickbagsPortal.