Legal
Privacy policy
Short, because there is little to tell: we do not collect personal data.
Who is responsible
AESHA Technology Services Limited, House of Francis, Ilu de Port, Mahe, Seychelles, runs this service and is responsible for how it handles data. You can reach us at [email protected].
What we store
- Your wallet: a random wallet ID, a sign-in check that cannot be turned back into your password, and your sealed wallet. None of this identifies you, and none of it can be opened by us.
- Sign-in sessions: a random session token (stored in a form that cannot be reused if our database were copied), the wallet ID, the coin, a scrambled version of your internet address that cannot be turned back into the address, your browser type and timestamps. Sessions expire on their own.
- Security record: events such as sign-ins, failed sign-ins, saves, settings changes and deletions, each with the same scrambled internet address. This record can only be added to, never edited, and is used to spot abuse.
- Sign-in attempt counters: kept per scrambled internet address and per wallet ID, cleared after a successful sign-in or after twelve hours.
- Authenticator app secret: stored in sealed form, and only if you turn on two-step sign-in.
What we do not store
No email address, no name, no phone number, no readable internet addresses, no private keys, no passwords, no recovery phrases. There are no analytics, no advertising scripts, no third-party cookies and no browser fingerprinting.
Cookies
Each coin's site sets two small cookies that are needed to keep you signed in and to protect your session from being misused. They are locked to that site only, are never shared with other sites and are never used for tracking.
Blockchain data
To show balances and pass on payments, our server asks public blockchain services on your behalf. Those requests contain the addresses in your wallet but nothing about your session or who you are. The blockchain services see our server's internet address, not yours. Everything you send or receive is, by the nature of blockchains, publicly visible on the network itself.
Server logs and protection services
Like almost every website, our web server may keep standard access logs for a short time to keep the service running and secure. The site is delivered through a content-delivery and protection network that filters attacks; it sees the same connection details any website host does. None of this is used to build profiles.
Your control
You can download a copy of your sealed wallet at any time, and you can delete everything we hold about your wallet from Settings → Delete wallet. Deletion is immediate and cannot be undone on our side; your recovery phrase keeps working in any other wallet. Because we hold nothing that identifies you, there is nothing else to look up, correct or export on request, but you are welcome to ask.
Changes
This policy may change as the service develops. The current version is always the one on this page.