Privacy Policy
The short version: we never see your recovery phrase. We run no analytics and no advertising, and we ask for no identity documents. We do keep the minimum a wallet needs to work, and this page lists it item by item rather than in a category.
What we never have
Your recovery phrase, and your share of the signing key in any form we can read. The phrase is generated on your device and never stored by us; the share reaches us only as a backup encrypted under your phrase, which we cannot open. Neither is ours to lose or to hand over.
Your name, address, date of birth, documents or selfies. We do not run identity verification and do not ask for any of it.
Analytics, telemetry, advertising or third-party trackers. There is no such code in the app or on this site, so there is no profile of you to sell and none is sold.
What we do store
Your Telegram account id, your Telegram username if you have one, and your interface language. This is how you sign in and how the wallet greets you in the right language.
Your wallet’s public data: public keys, account identifiers and the labels you give your vaults.
One share of your signing key, and the encrypted backup of yours. Our share cannot sign anything on its own; it exists so that a transfer needs both your device and the service. Your device encrypts the backup of your share, with a key made from your recovery phrase, before sending it, and we cannot open it.
Your operation history: what was sent, in which asset and network, to which address, when, and the resulting transaction identifier. A wallet that could not show you your own history would not be a wallet.
The deposit addresses issued to you, invitation codes and who joined through them, and, if you created one, API keys for the machine interface.
Why we store it
To operate the wallet: to sign you in, show balances and history, prepare transfers and credit deposits.
To keep the service honest and safe: to detect abuse, to keep an audit trail of operations, and to answer you when something goes wrong.
We do not use any of it to profile you, to advertise, or to sell to anyone. There is no third party we share it with for their own purposes.
Who else is involved
Telegram, because the wallet runs inside it. Telegram tells us your account id, username and language when you open the app, under Telegram’s own privacy policy.
A third-party routing provider, which executes transfers between assets and networks. It receives what an exchange needs (the assets, the amount and the destination address) and not your Telegram identity.
Public price sources, for the rates shown next to your balances. They are asked about assets, never about you.
Our infrastructure provider, which delivers the site and the app.
The blockchains themselves. Anything settled on a public network is public and permanent, and no privacy policy can change that, ours included.
Cookies
Two cookies, both of them functional. The app sets one, which keeps you signed in after Telegram has authenticated you. This site sets one only if you choose a language from its menu, so that its home address opens in that language; it lasts a year. The price form on this site also remembers the last pair you priced, in your browser’s own storage, and never sends it to us. There are no advertising or analytics cookies, so there is no consent banner to click away.
How long we keep it
Account and operation records are kept while your account exists, and afterwards only as long as we must to meet legal obligations or to resolve a dispute.
Server logs are short-lived and technical: they record that a request happened and whether it failed, not your recovery phrase or your share of the key.
Your choices
You can ask what we hold about you, ask for it to be corrected, or ask for your account and its records to be deleted. Write to us and we will do it.
Two limits are honest to state. Deleting your account does not delete anything already settled on a public blockchain, because we cannot edit a public ledger. And it does not delete your funds, which stay where they are. But signing for them needs our share of the key, which belongs to the account, so move them out before you ask us to delete it.
Changes and contact
We may update this policy. The date above changes when we do.
Privacy questions, access and deletion requests: [email protected].