OneProfile touches browser profile data. Treat every profile path as sensitive.

OneProfile will not:

• Upload profile data.
• Print saved passwords, wallet seeds, or private keys.
• Decrypt wallet vaults.
• Reset wallet extension passwords.
• Forge Chromium Secure Preferences MACs for silent extension installation.

Open a GitHub security advisory or private issue with:

• OneProfile version.
• Browser and OS.
• Redacted plan output.
• Exact command run.

Do not include wallet seeds, private keys, saved passwords, cookies, or profile archives.

Wallet extensions are detected and guarded by default. Any wallet adapter must use official wallet import/export surfaces and must not exfiltrate secret material.