Privacy policy
Last updated: September 2026
What we collect
- Account: a username and a salted password hash. No email address or phone number is required.
- Session: a signed cookie (
ck_session) that keeps you signed in for up to 12 hours. It is strictly necessary for the service. - Server logs: standard request logs including IP address, used only for rate limiting and abuse prevention, retained for a short period.
What we do not collect
- Private keys or recovery phrases — the site has no way to receive them.
- The contents of your USB stick. Your browser reads
wallet.jsonlocally and sends only the public addresses it contains. - Analytics, advertising identifiers or tracking cookies. There are no third-party scripts on this site.
How public addresses are used
When you connect a wallet, the public addresses are sent to our server, which queries public blockchain and market data providers on your behalf (Blockstream, mempool.space, public Ethereum RPC nodes, Ethplorer, CoinGecko). Results are cached in memory for up to a few minutes. Addresses are not stored in a database or linked to your account.
Those providers may see the addresses being queried, as they would for any wallet or block explorer. Their own policies apply to them.
Your controls
- Sign out at any time; the session cookie is cleared.
- Eject the USB or remove it; the browser clears the portfolio from memory.
- To delete your account, contact us at the address below.
Changes
If this policy changes materially, the date above will be updated.