From 1edb9ac5723f2d5fda5093437b2e375f98af3777 Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Thu, 25 Jun 2026 18:08:07 -0700 Subject: Settings: let users opt out of coinos realtime notifications (privacy) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The WS watcher is the one place the app shares addresses off-device (it subscribes your scripthashes to coinos to push instant payment updates). Add an 'Instant notifications' toggle in the explorer settings: off means the app never connects to coinos and polls your chosen explorer instead — a bit slower, more requests, but nothing is told to coinos. wsUrl returns null when disabled, so startRealtime cleanly skips the socket and relies on the polling fallback. Co-Authored-By: Claude Opus 4.8 (1M context) --- src/api.js | 23 +++++++++++++++++------ 1 file changed, 17 insertions(+), 6 deletions(-) (limited to 'src/api.js') diff --git a/src/api.js b/src/api.js index 1f57353..b981bc6 100644 --- a/src/api.js +++ b/src/api.js @@ -45,11 +45,10 @@ function resolveHosts(net) { return [host('https://mempool.space', 'mempool'), host('https://blockstream.info', 'esplora')]; } -// Realtime is a private Fulcrum (Electrum protocol over WebSocket-Secure). It -// reliably pushes a scripthash-status notification the moment a tx touches a -// watched address — unlike the public Esplora/blockchain.info sockets, whose -// address push doesn't fire. Independent of the REST explorer choice. Mainnet -// only; testnet falls back to polling (null). Overridable for staging/testing. +// Realtime notifications come from coinos's WebSocket watcher: it pushes the +// instant a tx touches a watched address (the app subscribes its frontier + +// pending scripthashes). Independent of the REST explorer choice. Mainnet only; +// testnet falls back to polling (null). Overridable for staging/testing. const ELECTRUM_KEY = 'btc-wallet-electrum'; export function getElectrumWsUrl() { try { @@ -60,8 +59,20 @@ export function getElectrumWsUrl() { // WebSocket quirk; the main hostname proxies WS cleanly). return 'wss://coinos.io/electrum'; } + +// Privacy opt-out: turning this off means the app never connects to coinos's +// watcher (so it can't see your addresses) and relies on polling your explorer +// instead. On by default. +const REALTIME_KEY = 'btc-wallet-realtime'; +export function getRealtimeEnabled() { + try { return localStorage.getItem(REALTIME_KEY) !== 'off'; } catch { return true; } +} +export function setRealtimeEnabled(on) { + try { localStorage.setItem(REALTIME_KEY, on ? 'on' : 'off'); } catch {} +} + export function wsUrl(net) { - if (net === 'testnet') return null; + if (net === 'testnet' || !getRealtimeEnabled()) return null; return getElectrumWsUrl(); } -- cgit v1.2.3