REP Proofs: privacy
This page says what the REP Proofs browser extension reads, what leaves your browser, and who receives it. The same list is inside the extension under "what leaves this browser". Version 0.1.0. Last updated 11 November 2026.
Who we are
REP Proofs is made by REP Labs. Contact: id0@r3p.xyz.
What the extension is for
One thing: letting you prove a figure from your own exchange account, such as your trading volume or your referral volume, without giving anyone your login. The proof is made in your browser and co-signed by a notary.
When no proof is running
Nothing while no proof is running
The extension has no access to any website. It cannot read pages, tabs, history, cookies or requests, and it injects nothing into any page. It does not run in the background, has no analytics, no telemetry, no device identifier and no fingerprint. Access to one exchange site is asked from you at the moment of a proof and ends with it.
During one proof, after you press "prove"
To the exchange
One read-only request, made with your login on that site. It travels through a REP relay, encrypted end to end to the exchange
If you choose the key path instead, the request is signed with your view-only key
The exchange sees the request arrive from the relay's address, not from your computer. The key path is not part of version 0.1.0.
To the notary (run by REP)
The encrypted session and the fields you reveal. It cannot read your login, your key or the rest of the answer
For referral volume the revealed fields are each referral's level and volume, without who they are. The total is added up from them
For proofs tied to your account, the id of that exchange account. REP turns it into a one-way tag, so one account cannot be claimed twice, and drops the id
Your network address, as any server you connect to sees it
How the account id is shown: the proof reveals the start of your login token, up to the account id inside it. The rest of the token, with its signature, stays hidden, so the revealed part cannot be used to log in.
To REP (only if a REP Web page asked for the proof and you confirmed it)
The fields listed under "REP learns", which request was made, when, and the notary signature
For volume proofs REP turns the figure into a floor ("at least X") and keeps the floor.
What never leaves your browser
- Your login on the exchange site, your password, any key.
- The rest of the exchange's answer: your trades, your balances, the names or ids of the people you referred.
- Anything about other sites or other tabs.
What is stored, and where
- On your computer: a request from REP Web that is waiting for your answer, and its result if the page was closed before it could be delivered. Both are held for the browser session only. No logins, no keys, no history of proofs.
- At the notary: no copy of the revealed fields is kept. Its logs hold sizes and timings of sessions. The company that hosts the notary can see the network addresses that connect to it.
- At REP, when you send a proof to REP Web: the floor, the counts, the one-way tag, the time and the notary's signature, with your REP account.
The debug log
If something goes wrong, "copy log" puts a short technical log on your clipboard: the version, the stages of the proof and how long each took, connection events, the exchange's status code and the kind of error. It holds no login, key, cookie, figure, account id or referral row. It is sent nowhere unless you paste it to us yourself.
What we do not do
- We do not sell your data or pass it to anyone for advertising.
- We do not use it for anything other than the proof you asked for.
- We do not use it to decide creditworthiness or for lending.
Your choices
Every proof starts with your click and your browser's own permission prompt. You can decline either. Removing the extension removes everything it stored on your computer. To ask about, correct or delete what REP holds from a proof you sent to REP Web, write to the contact address above.
Limits you should know
- The notary is run by REP. A proof is as trustworthy as that notary.
- The notary and the relay see your network address during a proof.
- The exchange may have its own rules about tools that use your login. The request is one read-only call for your own data.
Changes
If what the extension reads or sends changes, this page and the permission list published with each version change with it, before the new version is released.