Security

Two lists. One of them has nothing behind it.

A privacy claim is only checkable against an inventory. First, every field this wallet writes down — including the contact details the sign-up form does ask for. Then everything it never asks for at all, which is the list that decides whether an account can be opened.

What we store

The whole inventory, in order.

Anything not on this list is not in the database, because no screen in the product asks for it. Note that name, phone and email are on it — the honest claim here is not that we collect nothing, it is that none of it is ever verified.

Full name: Exactly as you typed it at sign-up. It is never checked against a document, so it is a label you chose rather than an identity we hold.
Phone number: Exactly as you typed it. No code is sent to it and nothing depends on it being reachable.
Email address: Exactly as you typed it. There is no confirmation link and no verification step, so it proves nothing about who owns the account.
Username: The handle the interface uses for you and the name you sign in with.
Passphrase hash: A bcrypt hash at cost 10. The passphrase itself is never written down — which is also why nobody here can read it back to you.
Wallet address: One Bitcoin address per account, and the balance recorded against it to 8 decimal places.
Transaction ledger: Per movement: the amount, the direction, the address at the other end, the timestamp, and the fee breakdown that was applied.
Created at: The moment the account was opened. Nothing is gated on it.
Session cookie: A signed token in an HttpOnly cookie, valid 7 days. It carries an account id and nothing else, and scripts in the page cannot read it.
Server logs: Ordinary application and error logs from the hosting layer. They exist to keep the service running and they are not joined to your ledger.

What we never ask for

Nothing.

Lift any bar below. They all read the same, because there is no column behind them — none of these is part of opening or keeping an account here. No document upload, no liveness check, no reviewer, no queue.

A field that was never collected cannot leak, cannot be subpoenaed and cannot be sold. That is the whole argument.

Government ID
Passport or driving licence
Selfie or liveness check
Proof of address
Source of funds
Employer or occupation
Tax residency
Approval queue

No ID upload · no selfie · no proof of address · no source-of-funds questionnaire · no approval step

Custody

How the bitcoin is held, and what happens if you lose access.

Your balance is held by us, not by you

This is a custodial wallet. You do not hold a private key for your address — your balance is a record we keep on your behalf. That is the trade being made: nothing about you is verified to open an account, and in exchange the keys are not in your hands. If holding your own keys matters more than skipping verification, a self-custody wallet is the right tool, and we would rather say that here than let you find out later.

A transfer between two accounts on this system is a movement on our ledger: your balance falls by the total, the recipient's rises by the amount, and both rows are written with the fees attached. Nothing is broadcast to the Bitcoin network on your behalf, so there is no block to wait for and no confirmation count to read — the movement is either written or it is refused.

If you lose the passphrase, that is the end of it

The passphrase is stored only as a hash, so there is nothing on our side to read back. The email and phone on the account were never verified, which means neither is proof that an account is yours and neither can be used to hand it back to you.

Write the passphrase down and keep it somewhere physical. Skipping verification and guaranteed account recovery cannot both be true at once; this product chose the first one.

What we do not claim

We have not published a third-party security audit, and we are not going to imply one with a badge. If that changes, this page will carry the auditor's name, the date and the scope. We hold no certification and we make no claims about cryptography this product does not implement.

The ledger is a database we can read — the privacy here is that it holds nothing about you that was ever checked, not that it is opaque to us. Your connection also reaches our host like any other web request. If you need anonymity at the network layer, put Tor or a VPN in front of it; that layer is yours to control, not ours.