privacy policy

last updated: march 21, 2026

Tempo Keys is a browser extension that creates time-limited access keys for Tempo wallets and auto-pays MPP (Machine Payment Protocol) services. This policy explains what data the extension handles.

data collected

Tempo Keys does not collect, transmit, or sell any personal data. All data stays on your device.

data stored locally

The extension stores the following in Chrome's local storage (never sent to any server):

Wallet credential ID — a reference to your existing Tempo passkey, read from wallet.tempo.xyz
Public key — your wallet's public key (not a secret)
Access key — a session-scoped P256 key pair with on-chain spending limits and expiry, stored in session storage (cleared when you close the browser)
Transaction history — a local log of transactions made through the extension

network requests

The extension communicates only with:

wallet.tempo.xyz — one-time read of your passkey credential during setup
Tempo blockchain RPC (rpc.presto.tempo.xyz) — to submit and verify transactions
MPP-enabled websites — when auto-paying HTTP 402 challenges, the extension sends payment credentials (transaction hashes) to the requesting server

No data is sent to any analytics, tracking, or third-party service.

permissions

storage — to persist wallet credential and access key
alarms — to check access key expiry
scripting — to read passkey credential from wallet.tempo.xyz
activeTab — to inject the MPP fetch wrapper on the current page

security

No private keys are ever displayed, exported, or transmitted
Access keys have on-chain enforced spending limits and expiry
Session keys are stored in session storage and cleared when the browser closes
Wallet authentication uses WebAuthn (Touch ID / Face ID) — biometrics never leave your device

third-party services

None. The extension does not use analytics, crash reporting, or any third-party services.

changes

Updates to this policy will be posted on this page with a revised date.

contact

Questions? Open an issue on GitHub.