Privacy & limitations

This standalone web companion is a review preview for Sepolia testnet. It is separate from the mobile wallet and from DeFiGuru’s other products.

Keys and signing

This site has no seed phrase or private-key input and does not create or store a key vault. It requests signatures only through the external browser wallet selected by you. Your wallet, its extensions, device and RPC service have their own trust boundaries. A compromised site or wallet can still cause harm; inspect the final wallet confirmation.

Data and network

No analytics, advertising, remote fonts, token icons, backend login or automatic blockchain polling is included. The hosting provider receives normal web requests, including IP address and request metadata, and may retain access logs under its own configuration. After your consent and an explicit action, the selected wallet provider handles public address, network, token and transaction requests. Its RPC service can see these requests and your IP. This site does not control that provider’s retention policy.

Wallet connection, token entries and balances stay in page memory. Before requesting a transfer, this preview saves public transaction metadata (network, sender, recipient, token, amount, label and status/hash) in this browser’s local storage. No seed, key or signature is stored. The reservation survives reload and blocks further submissions; failure to save it prevents sending. Receipt reconciliation is manual. Exact transaction data, canonical receipts and token Transfer logs are checked through your selected provider. New records include the approved account nonce, gas and gas price. Only a verified finalized success or EVM revert releases a reservation. Missing receipts, mismatches, reorgs and legacy records without a saved nonce stay reserved. Up to 64 public records are retained without automatic trimming; you can export history and explicitly review/remove completed records while account replay-protection floors remain stored. Clearing site storage removes this protective record. Never retry a transfer with an unknown outcome without checking the connected wallet and transaction explorer first. Explorer and GitHub links open their own services. There is no recovery-phrase support form.

Public address explorer

The separate address explorer supports explicit read-only searches on Base, Ethereum and Sepolia. It never connects to a wallet or requests a signature. Searches, contract inspection and manual pagination send public addresses and contracts through YLDX hosting to fixed public RPC and indexer services: Base RPC, PublicNode, Routescan and Blockscout. The hosting service sees your IP and public queries; upstream providers see those queries and the hosting server IP. No credentials, cookies or incoming authorization headers are forwarded. Results and the searched address stay in page memory; this page does not save a search history. Hosting infrastructure may retain normal access logs according to its configuration. A manually requested pool estimate reads DefiLlama public yield data without sending your wallet address. Pool APY is a third-party estimate, separate from realized wallet return, which is unavailable in this version. Indexed data is incomplete and may be delayed or unavailable; unsupported or missing positions are not treated as zero. NFTs and general DeFi position discovery are unsupported. No background polling is performed.

Product limits

Only Sepolia chain 11155111 is enabled in the separate transfer workspace. The read-only address explorer can observe Base and Ethereum mainnet but cannot sign or send. Tokens are imported manually by contract. A user label does not establish LP identity, safety or monetary value. ERC-721/1155, Uniswap V3 NFT positions, swaps, approvals, bridges, deposit/redeem, automated rebalancing and mainnet transfers are not supported. Transfer submission is not proof of confirmation. This is not an independently audited or store-approved release.

Mobile and legal review

Existing Android testnet custody evidence belongs to the recovered mobile project. The web companion does not implement native mobile custody. iOS compilation, device validation, publisher signing and App Store / Google Play submissions remain release gates. Self-custody does not itself establish exemption from every licensing, financial-services, sanctions, privacy or consumer-law requirement. Jurisdiction and token classification need legal review.

Audit source

YLDX-Wallet repository starts as a private audit workspace. Public release follows source/license review. Do not send seed phrases, private keys or funded-wallet backups to anyone reviewing this project.

Review preview · 18 October 2026