Privacy and data

Grub keeps you anonymous by default: no account, no sign-in, no wallet connection. Here is exactly what leaves your browser.

When you…	Who sees what
use any chain tool	public BNB Chain RPC endpoints (bsc-rpc.publicnode.com, bsc-dataseed.binance.org) see the addresses, calldata and tokens you check, from your IP
check a transaction or token	OpenChain / 4byte see the function selectors; Sourcify sees the contract addresses
run a scam check	the /api/lists helper sees the domains found in the text (not the text); GitHub raw sees your IP when the address list loads
ask the grub with the server brain enabled	the helper sends the message and the tool results to the model provider; disabled unless the operator set a key
use "Watch an address"	the address is stored in your browser's local storage only
revoke an approval	your own wallet signs; the transaction is public like any other

Grub keeps no database and no accounts, sets no cookies, and the two helpers store nothing; the hosting provider keeps its standard short-lived request logs. Counters shown in the app ("checks eaten") live in your browser's local storage.