Skip to content

Security: sane-apps/lanatax

Security

SECURITY.md

LanaTax Security

Security Model

LanaTax runs in the browser and stores working data in local browser storage. Treat any Helius API key entered into the app as sensitive.

Recommended Use

  • Use a Helius key scoped for this tax export workflow.
  • Do not enter private keys or seed phrases. LanaTax only needs a public wallet address and a Helius API key.
  • Clear browser site data when using a shared machine.

Reporting

Email security or privacy concerns to hi@saneapps.com.

Please do not include private keys, seed phrases, full transaction exports, or personal tax documents in public GitHub issues.

There aren't any published security advisories