Security
Read-only scan. No seed phrase. Nothing moves until you review and sign.
- WalletTidy never takes custody of assets. It never asks for a seed phrase or private key, never stores signing keys, and never signs on your behalf.
- You can scan by pasting a public address. Connecting a wallet is only required later, to review a cleanup for that same address.
- RPC requests go through a first-party proxy with a fixed method allowlist. Paid provider credentials are not shipped in browser JavaScript.
- Automatic closure is offered only for accounts the classifier marks SAFE_TO_CLOSE. Uncertain means do nothing destructive.
- A cleanup transaction may only close approved empty token accounts and transfer the 1% fee to the configured recipient. Token transfers, burns, and approvals are not part of this product. Mainnet send is not offered in this build.
Before you sign
- Confirm the wallet prompt only closes empty accounts.
- Confirm the 1% fee destination.
- Never type a seed phrase or private key.
- The scan did not require a connection. Signing does.
This product has not published a third-party audit. Do not treat this page as one. The classification and transaction-safety core lives in this repository and is tested there; that is not a substitute for an independent audit or for checking what your wallet displays before you sign.
Nobody legitimate will ever ask you for a seed phrase or private key.