Privacy Policy — Polymarket Stops
This policy covers the Polymarket Stops Chrome extension only. The Convicta service as a whole has its own Privacy Policy.
Last updated: 2026-07-31
The short version
Polymarket Stops has no server, no account and no analytics. Everything it knows stays in your own browser. We receive nothing from your use of it, and we could not receive anything even if we wanted to, because there is nowhere for it to go.
What the extension stores, and where
All of it lives in chrome.storage.local, on your computer, and is deleted when you remove the extension:
- The wallet address you confirmed. You type it, or you confirm one the extension read from Polymarket’s own page. It is never guessed.
- The rules you arm — market, outcome, trigger level, sizes, and your settings.
- An execution log — what was decided, what was placed, what came back. This is what lets you check the extension’s work against Polymarket’s own order history.
What leaves your browser
By default, only requests to Polymarket, from your browser, to these four hosts:
polymarket.com— the market page itself, where your order is placed by filling in Polymarket’s own form in your own logged-in session.clob.polymarket.com— the public order book, read to compute the trigger price.gamma-api.polymarket.com— public market metadata: outcomes, minimum order size, and whether a market has closed or resolved.data-api.polymarket.com— your public on-chain positions, read for the address you confirmed.
These are the only hosts the extension is permitted to contact on a default install.
One optional exception, off until you turn it on. You may configure an order webhook so that something outside the browser learns an order was placed — a resting order is otherwise invisible from outside. If you enable it, and only then, the extension asks Chrome for permission for that host and sends one small message per order: the kind of order, the side, the number of shares, the price, the notional value, and the market’s title, outcome and slug.
It never sends your wallet address, your position, your balances, or your cash. That is not a promise about intent — a test in the source fails the build if the payload ever contains anything else.
What we collect
Nothing. There is no telemetry, no crash reporting, no usage statistics, no identifier, no cookie set by us, and no server of ours involved in any part of normal operation. If you enable the webhook and point it at Convicta’s relay, that relay receives the order notice described above and nothing else; point it at your own endpoint instead and even that does not happen.
Private keys
The extension never asks for, receives, stores or transmits a private key or a seed phrase, and it has no code capable of using one. Orders are placed by operating Polymarket’s own interface in your own authenticated session — exactly the path taken when you click the button yourself. Anyone asking you for your key in the name of this extension is not us.
Third parties
Polymarket is a third party we do not control, and its own terms and privacy policy govern your account there. This extension is not affiliated with, endorsed by, or connected to Polymarket.
Your control
- Remove the extension and everything it stored goes with it.
- The rule list and the log are visible in the extension’s own popup at any time.
- Nothing runs while Chrome is closed.
Changes
If this policy changes, the date at the top changes with it, and the change ships in the same release as the code that made it necessary.