Security

The Baggy Promise

Baggy with a clipboard and pen, auditing — "checking receipts."

👜 Baggy looks. Baggy doesn’t touch.

BAG CHECK requires no wallet connection, token approval, signature, or transaction to check your bag. Ever.

read-only · no signature · no approval · no transaction

How BAG CHECK works

↓ You paste a public address
↓ BAG CHECK reads Robinhood Chain (public explorer + RPC)
↓ Baggy judges the public data
Done

There is no step where anything is sent from your wallet, because there is no code in BAG CHECK that could send it.

BAG CHECK does not receive

Seed phrasenever
Private keynever
Wallet connectionnever
Signaturenever
Token permission / approve()never
Spending approval / Permit2never
Transactionnever
Your name, email, or phonenever

Provable, not promised

The analyzer contains no wallet transaction or token-approval flow: no contract-writing client, no approve(), no eth_sendTransaction, no Permit / Permit2, no signing flow, and no wallet SDK in the core path.

An automated test in the repository scans every source file and every dependency for those methods and fails the build if one is ever introduced. The code is the statement.

If a site claiming to be BAG CHECK asks you to approve tokens or send a transaction just to check your bag — reject it.

Token approvals can become wallet-draining attack vectors when the approved contract is malicious or compromised — wallets like MetaMask warn about exactly this. Real BAG CHECK never asks. Remember it as: Baggy doesn’t touch.

Privacy

We don’t need your name, email, phone number, or wallet login. The only input is a public address.
We don’t build a dossier. Rate limits use a salted, daily-rotating hash of your connection — never stored with a wallet address. Analytics are daily counters, not per-person logs.
Share cards show percentages, a shortened address, and never exact balances or values. Results are cached for ten minutes and then expire.
The referral cookie stores a six-character code, nothing about you.

Everything BAG CHECK reads is already public on Robinhood Chain. We make it easier to understand — and funnier — not more exposed.

Someday, proving ownership

If a future feature ever needs to prove a wallet is yours (claiming something), the correct tool is Sign-In with Ethereum (ERC-4361): an off-chain signed message, verified by the server. That is authentication — it is not a token approval and moves nothing. It is not required today and not planned for beta.

BAG CHECK is an independent application deployed on Robinhood Chain. It is not built by, endorsed by, sponsored by, or affiliated with Robinhood Markets, Inc. About