What Brume hides. What it cannot.

Shield moves tokens into your Brume vault, a Smart Account on the Squads Smart Account Program. Your wallet key is the only signer, with a threshold of 1 and no time lock. Brume does not hold a key that can move your vault funds.

The vault is a normal on-chain account. Anyone who knows the vault address can see its balance. Shield keeps funds separate from your main wallet balance. It does not hide the amount.

The Smart Account settings account lists your wallet address as its signer. An observer can link your wallet to your vault.

When you shield tokens, the chain records a transfer from your wallet to your vault. The amount and the time are publicly visible.

When you unshield or send from your shielded balance, the chain records a transfer from your vault. The recipient address and the amount are publicly visible.

Shield and unshield work on Solana Mainnet and Devnet. On Mainnet, shielded balances are real funds and every transaction is final. On Devnet, they are test tokens with no real-world value.

Vault safety depends on the Squads Smart Account Program and on its upgrade authority. Brume stores your vault address on this device. If that record is lost, Brume finds the vault again from on-chain data.

Off unless you turn it on. If you turn it on, the extension sends product events and screen recordings of the Brume window to PostHog. Events do not include addresses, amounts, or signatures. Seed phrase, private key, and password screens are not recorded. Other screens, such as your dashboard, can be. Turn it off in Settings.

The current version does not hide balances, amounts, or counterparties. A privacy layer is not part of this release.