The shortest, clearest privacy policy in crypto, because the best way to protect your data is to never collect it in the first place.
We have never, and will never, see your private keys or seed phrase.
We don't log your wallet addresses, balances, or which chains you use.
No cookies, no pixels, no third-party trackers. Ever. Anywhere on this domain.
Optional. Off by default. When on, we receive an anonymous stack trace, no addresses, no balances, no IP.
The desktop app pings our update server with a version string. No identifier, no telemetry, no cookies.
This website uses privacy-friendly analytics (Plausible), page views and country, no cookies, no fingerprinting.
Anything generated by the wallet, keys, address book, transaction cache, lives on your device, in encrypted storage. None of it is uploaded to us, even if you opt into crash reports or cloud sync (cloud sync is end-to-end encrypted with a key only you hold).
If you opt in, we receive an anonymized stack trace plus the OS family (macOS / Windows / Linux). No IP. No identifier. Reports are auto-deleted after 30 days.
If you enable cloud sync, your address book and dApp permissions are encrypted on-device with a key derived from your seed, then uploaded to our storage. Nobody at BitClout, and nobody breaching our servers, can decrypt it.
This site uses Plausible Analytics. It records page views and approximate country, no cookies, no cross-site tracking. The full Plausible dashboard for this domain is public, write to us if you want the link.
If you email support, we keep the thread for 12 months so we can answer follow-up questions. You can request deletion at any time.
Under GDPR, CCPA and similar laws, you have the right to access, correct, export and delete personal data we hold. Since we hold almost none, most requests are answered with 'we don't have anything on you'. The few that aren't are answered within 30 days.
BitClout Wallet is not intended for users under 16. We don't knowingly process data from children, and we don't process much from anyone.
Servers used for crash reports and cloud sync live in the EU and the US. Cloud-sync data is end-to-end encrypted and unreadable in transit and at rest.
Material changes are announced in the changelog and dated above. We never weaken privacy protections retroactively.
Run BitClout Wallet behind Wireshark, Little Snitch or your favorite firewall. The only outbound connections you'll see are to chain RPC nodes you configure, our update server (version string only), and, if enabled, our crash report endpoint.
