Non-custodial & your keys
Chartist never holds your funds. Every wallet it creates for you is a real Solana wallet with a real private key — sealed inside an isolated signing service, not the main app server, and yours to take with you at any time.
How custody works
The app server that runs the terminal, the launcher and the campaign designers never sees your private key material — it only ever holds public addresses. Signing happens in a separate, isolated service, and every transaction it signs is independently checked against a strict allow-list before it goes anywhere: the right instruction shape, the right fee leg, nothing unmatched.
Exporting a key
Open a wallet on the Wallets page and choose Export. You'll see an explicit warning first, then a one-time reveal of the base58 private key — paste it straight into Phantom or any wallet you like. The reveal only ever exists in your browser tab and is dropped the moment you close the dialog.
If you signed in with a connected wallet, exporting asks for one extra signature from that wallet first — proof that the request really came from you, checked independently by the signing service rather than trusted from the app server. If you signed in with email only, connect a wallet before exporting: a password alone can't stand in for that proof, because the server checking a password is the same server the signature exists to distrust.
Agent keys are different — and bounded
- An agent key can trade through your wallets if you scope it to do so.
- It can never export a private key, withdraw funds, or delete a wallet.
- It's revocable in one click, and you can cap how much it can spend per hour.
A leaked agent key is bounded, revocable trade access — never a drain. See Wallets & agent keys for how to create one.