Chancela

Privacy

Chancela is an open-source authorization layer for AI agents. This page covers the deployment at chancela.xyz, which is run by David Matheus Souza, in Brazil, as a hackathon project on the Monad testnet. Last updated 7 October 2026.

Reading the site needs nothing from you

The landing page, the live ledger, proof pages and agent passports are public. They set no cookie, ask for no wallet and load no analytics, advertising or tracking scripts.

What is stored when you sign in

Signing in is only needed to manage your own agents. You can sign in with a wallet signature, a passkey, or an email address through Privy. The service then stores:

  • your owner address, which is the public address of the wallet or account you signed in with;
  • your email address, only if you chose email sign-in;
  • the public key of a passkey you register. The private key never leaves your device;
  • the agents and policies you create, and the decisions made for those agents;
  • one session cookie, __Host-chancela_session, used only to keep you signed in.

The site never asks for a seed phrase or a private key, and signing in is a signed message, not a transaction: it cannot move funds or approve a token.

What an agent sends

An agent that calls the authorize endpoint sends the action it wants to take and its parameters. These are stored so the decision can be audited by the agent's owner. For agents that are not public demo agents, only hashes, the action name, the outcome and the reason are shown publicly; parameters and prompts are not.

What is public on Monad, permanently

Each decision for a registered agent is anchored on the Monad testnet as hashes: the agent's token id, the policy hash and the decision hash. A blockchain record cannot be edited or deleted by anyone, including us. It contains no names, emails or parameters.

Who else sees data

  • Cloudflare sits in front of the site and sees requests, including IP addresses, as any CDN does.
  • Privy handles email and embedded-wallet sign-in, if you use it.
  • In the guided demo, the text typed for the demo agent is sent to a language-model provider to be read as an intended action. The decision itself is made by rules, not by the model.
  • A wallet address may be checked against a risk-label provider before a transfer is allowed.

Nothing is sold, and nothing is shared for advertising.

Rate limiting

IP addresses are used in memory to limit how often one visitor can call the public endpoints. They are not written to the database.

Removing your data

To have your account, agents and stored decisions deleted, open an issue at github.com/DavidMatheusSouza/Chancela naming your owner address. Hashes already anchored on Monad stay there. You can also run the whole service yourself: the code is MIT-licensed and does not call home.