Privacy Policy

1. Who we are

GaurdWallet is a non-custodial, multi-chain cryptocurrency wallet available as a web application at gaurdwallet.com/app and as a browser extension for Chrome and Edge. This policy covers both.

2. Non-custodial model

Your seed phrase and private keys are generated on your device, encrypted locally using scrypt key-stretching and AES-256-GCM, and never transmitted to our servers or any third party. We have no ability to access, recover, or view your keys or funds.

3. Data we collect

3.1 Anonymous heartbeat (opt-out)

Once per day, the application may send a minimal anonymous payload to gaurdwallet.com/api/app/heartbeat. This payload contains:

• A randomly generated installation ID (UUID, unrelated to any keys or addresses)
• Platform (web or extension)
• Application version
• Browser locale (e.g. "en-US")
• Whether a vault exists (boolean)
• How the vault was created — "created" or "imported" (set once)

The heartbeat never includes addresses, balances, transactions, seed material, IP addresses (not stored server-side), or behavioral event streams.

3.2 Address presence (opt-out)

Once per day, the application may send your public wallet addresses to gaurdwallet.com/api/app/presence for support routing purposes. This contains only public addresses (up to 5 accounts) and the same anonymous installation ID. No private keys, seed phrases, or balances are included.

3.3 Network calls

The wallet connects to public blockchain RPC endpoints to fetch balances, broadcast transactions, and retrieve price data. Some of these calls are proxied through gaurdwallet.com for reliability. These are functional calls required for the wallet to operate; no user data is logged from them.

4. What we do NOT collect

• Private keys or seed phrases
• Balances or transaction history
• Personal information (name, email, phone, government ID)
• Browsing history or page content
• Cookies, ad pixels, or fingerprinting
• IP addresses (not logged)

5. Browser extension permissions

The GaurdWallet extension requests two Chrome permissions:

• storage — to persist the encrypted vault and user settings locally on your device
• alarms — to auto-lock the wallet after a period of inactivity

The extension uses content scripts to inject an EIP-1193/EIP-6963 provider so that decentralized applications can detect and interact with the wallet. These scripts do not read, collect, or transmit any page content or browsing data. The extension requests no host_permissions.

6. Local storage

The following data is stored locally on your device and never transmitted:

• Encrypted vault (seed phrase and private keys, sealed with AES-256-GCM)
• User settings (auto-lock timer, active network selections, theme preference)
• Per-site dApp connection permissions (extension only)
• Account names

7. Opting out

You can disable the anonymous heartbeat and address presence in the wallet settings. Once opted out, all locally stored analytics data (installation ID, last-sent timestamp, vault source) is immediately deleted. The wallet also respects browser-level privacy signals: Do Not Track and Global Privacy Control headers automatically suppress all analytics.

8. Third parties

GaurdWallet does not share data with third parties. There are no third-party analytics services, ad networks, or tracking scripts. Blockchain RPC endpoints are public infrastructure; interacting with them is inherent to using any cryptocurrency wallet.

9. Data deletion

Uninstalling the extension or clearing browser data removes all locally stored information. There is no server-side account to delete. Opting out of analytics purges all analytics state immediately.

10. Children

GaurdWallet is not directed at children under 13 and does not knowingly collect any personal information from children.

11. Changes to this policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of GaurdWallet after changes constitutes acceptance of the revised policy.

12. Contact

For privacy-related questions, contact us at [email protected].