1. Overview
Snakehead is a Chrome extension that enables trading of crypto and stock perpetuals directly from your X (Twitter) feed, powered by Hyperliquid. This policy explains what data we collect and how we use it.
2. Data We Collect
- X (Twitter) account information — username and profile data via OAuth, used for authentication
- Wallet address — your Hyperliquid trading wallet address, used to execute trades and display positions
- Trade history — records of trades placed through the extension for your account dashboard
- Access codes — used to manage early access to the platform
3. Data We Do Not Collect
- We do not read, store, or transmit your tweets, DMs, or any X content
- We do not track your browsing activity outside of X.com
- We do not collect personal information beyond what is required for authentication
- We do not sell or share your data with third parties for advertising
4. How We Use Your Data
- Authenticate your identity via X OAuth
- Execute trades on Hyperliquid on your behalf
- Display your positions, balances, and trade history
- Show real-time price data for tickers mentioned in your X feed
- Process deposits and withdrawals
5. Third-Party Services
We integrate with the following third-party services:
- Hyperliquid — decentralized perpetuals exchange for trade execution and market data
- Privy — embedded wallet infrastructure for deposits
- X (Twitter) OAuth — authentication provider
Each service has its own privacy policy. We encourage you to review them.
6. Data Storage
Authentication tokens are stored locally in your browser via Chrome storage APIs. Server-side data (trade history, balance snapshots) is stored in encrypted databases. We retain your data only for as long as your account is active.
7. Permissions
The extension requests the following Chrome permissions:
- storage — store authentication tokens and user preferences locally
- identity — handle OAuth authentication flows
- tabs — open the trading sidepanel when you click a ticker
- sidePanel — display the trading interface alongside X
- offscreen — maintain WebSocket connections for real-time price updates
Host permissions are limited to x.com, twitter.com, and snakehead.xyz domains only.
8. Your Rights
You can request deletion of your account and associated data at any time by contacting us. Uninstalling the extension removes all locally stored data.
9. Contact
For questions about this privacy policy, contact us on X at @Snakeheadxyz.