Howl

Privacy

Covers howl.fi and the Howl for Chrome browser extension · Last updated October 9, 2026

In short: Howl doesn't ask for your name, email or any account. We never hold your funds or your keys. The browser extension reads token addresses on the X pages you open and nothing else, and it sends only those addresses, and what you type into it yourself, to Howl.

howl.fi

• No accounts. You use Howl with your own wallet. We never see your private keys or seed phrase, and every transaction is signed by you, in your wallet.
• Wallet address. When you connect, the site uses your public wallet address to show balances, quotes and your Season points. Wallet addresses and transactions are public on the blockchain by nature.
• Holder sign-in. Some tools ask you to sign a free message once a day. It only proves you own the wallet; it can't move funds or approve anything.
• Referrals. If you arrive through a referral link, the referrer's address is stored in your browser so your trades can credit them.
• Technical logs. Our hosting provider (Cloudflare) processes IP addresses to deliver the site and stop abuse (rate limits). We don't use them to identify you and don't sell them.
• Local settings. Your theme, watchlist and similar preferences stay in your own browser's storage.

Howl for Chrome (browser extension)

• What it reads. On x.com and twitter.com: the text of posts and profile bios on your screen (to find token addresses), the link domains in those posts (to flag known drainer sites), and the username of the profile you are looking at (for Howl Intel). On gmgn.ai, pump.fun and fomo.family: the token address in the page's link and the wallet addresses or usernames shown in holder and trader lists. When you click the Howl icon on another site: that site's domain name, to check it (Chrome's activeTab, only for the tab you clicked on). On howl.fi's connect page: the public address of the wallet you connect there.
• What it sends. To Howl's public API on howl.fi only: token addresses (Howl Score, token panel), wallet addresses and usernames shown on those pages (labels), the X username of a profile you open or search (profile scan, Smart Followers), domain names (site check; never full links), addresses and names you type or paste into it, and your connected wallet's public address (Howl Intel access, the Revoke list, Howl SI with a random ID for this browser and the questions you ask). It sends no post text, no browsing history and no personal data.
• What it stores. Your settings (scores on X on/off, popup or side panel, hidden balances, where you placed the token panel), the wallet address you connected or chose to watch, a random browser ID for SI, recent results for a few minutes, what the open tab shows until you close it, and a list of your last 12 scans that you can clear at any time. All of it stays in your browser.
• Trading and revoking. The extension never signs anything and has no access to your wallet. Buy, Sell and Revoke open a small howl.fi window with the action filled in; you confirm it in your own wallet there. SI questions asked before you connect a wallet are counted by a random browser ID (3 free) and per IP address, to stop abuse.
• What it never does. It has no access to your wallet or keys, never posts or likes anything, never changes your X account, and doesn't track you.
• Howl Alerts (from v0.8). Only if you use it. On fomo.family, in your own signed-in Fomo tab: your Fomo username, the list of people you follow (when you import it) and the buys and sells in Fomo's Alerts panel. They stay in your browser, except the usernames and wallets you switch alerts on for, which are sent to howl.fi with a random id for your browser so Telegram pings and the free-alert limit work. Wallets you add yourself are sent to howl.fi to read their public trades. If you turn on "Keep watching when Fomo is closed", Howl keeps one pinned Fomo tab open; close it to stop. If you link Telegram, howl.fi stores your Telegram chat id to send the pings; send /stopalerts to the bot to remove it. Howl never posts, follows or trades on Fomo.
• Permissions. storage (the settings and the lists above), sidePanel (to open Howl in Chrome's side panel), activeTab (the domain of the tab where you click the Howl icon, for the site check), scripting (to run the token panel on the optional sites below once you turn them on), alarms (Howl Alerts checks once a minute), offscreen (to play the alert sound you picked), and access to howl.fi and api.geckoterminal.com (scores, prices, token info, SI answers, the connected address). For a coin logo neither has, the Alerts tab asks api.dexscreener.com with the token address only. Optional, only if you turn them on: notifications (alert pop-ups) and basedbot.app, axiom.trade and trade.padre.gg (Howl Intel on those sites). It runs on x.com, twitter.com, gmgn.ai, pump.fun, fomo.family and howl.fi pages, and on the optional sites you turn on.

What we never do

• We don't sell or rent any data.
• We don't use data for advertising or credit decisions.
• We don't share data with third parties, except the infrastructure needed to run the service (hosting, and public blockchain and market data providers that receive token addresses, never anything about you).

Scores are not advice

Howl Scores and Scent Check reports are automated readings of public onchain data. They are not financial advice, and a good score doesn't guarantee a token is safe.

Contact

Questions about this policy: reach us on X at @howldotfi.