Security model

Read-only by design.

What Shingan never does

• Ask for your seed phrase or private keys.
• Take custody of funds, or move them.
• Sign a transaction on your behalf.
• Give financial advice or recommend trades.

What it does

You give Shingan public addresses only. It reads on-chain activity, scores risk, and alerts you in the dashboard. Revoking is a call you sign — Shingan only builds approve(spender, 0) (or Permit2.approve(…, 0, 0) for Permit2 allowances) and hands you the link.

Data

Shingan stores your account email, the public addresses you connect, and the events and approvals it observes. No KYC. Analytics are first-party and cookie-less — IPs are hashed, never stored raw.

Account security

Alerts and your account live in the dashboard. If you lose access to your email, contact support before changing anything so we can verify ownership.

Honest limits

Monitoring is best-effort and can be delayed or incomplete, and it depends on external providers. Shingan is a security aid, not a guarantee. Read the Risk Disclosure and Security pages.