Privacy Policy

Last updated: February 26, 2026

This Privacy Policy describes how btcw.space and the BTCW Wallet browser extension ("we", "our", or "us") handle information. We are committed to protecting your privacy. The BTCW Wallet is designed to operate with minimal data collection — your keys, your coins, your control.

1. Information We Do NOT Collect

Private keys and seed phrases — Your wallet's private key and mnemonic seed phrase are encrypted with your password and stored locally on your device using Chrome's built-in storage API. They are never transmitted to our servers or any third party.
Passwords — Your wallet unlock password is used locally to decrypt your keystore. It is never sent over the network.
Personal information — We do not collect names, email addresses, phone numbers, IP addresses, or any other personally identifiable information through the extension.
Analytics or telemetry — The extension contains no analytics, tracking scripts, crash reporters, or telemetry of any kind.
Browsing history — Although the extension uses content scripts to provide a dApp provider (window.btcw), it does not read, record, or transmit your browsing activity.

2. Data Stored Locally

The following data is stored on your device using Chrome's chrome.storage.local and chrome.storage.session APIs:

Encrypted keystore — Your private key encrypted with AES-256-GCM, derived from your password via PBKDF2.
Wallet settings — Your node RPC URL, RPC credentials (if configured), and display preferences.
Recent transactions — A local cache of your recent transaction history for display purposes.
Connected sites — A list of websites you have explicitly approved to interact with your wallet.
Session data — Temporary unlocked state stored in session storage (cleared when the browser closes).

All locally stored data can be permanently deleted by resetting the wallet from the extension settings or by uninstalling the extension.

3. Network Communications

The extension makes network requests only to the following:

Your BTCW node (default: 127.0.0.1:8332) — to query blockchain data, check balances, and broadcast transactions. You configure this address yourself.
btcw.space — to fetch balance and UTXO data from the public BTCW explorer API as a fallback when a local node is not available.

No data is sent to any other server, advertising network, or third party. The extension does not use any external CDN, font service, or remote asset loading.

4. Permissions Explained

The extension requests the following Chrome permissions:

Permission	Purpose
storage	Store your encrypted keystore, settings, and transaction cache locally on your device.
alarms	Auto-lock the wallet after a period of inactivity to protect your funds.
host_permissions	Communicate with your local BTCW node (`127.0.0.1:8332`, `localhost:8332`) and the btcw.space explorer API.
content_scripts	Inject the `window.btcw` provider so dApps can request wallet interactions (with your explicit approval for each site).

5. Third-Party Services

The BTCW Wallet extension does not integrate with any third-party analytics, advertising, or tracking services. We do not sell, share, or rent any user data to third parties.

6. Open Source

The BTCW Wallet extension is open source. You can audit the complete source code to verify these privacy claims at github.com/btcw-space.

7. Children's Privacy

Our extension and services are not directed at children under the age of 13. We do not knowingly collect any information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of the extension after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy, you can reach us via the BTCW GitHub.

1. Information We Do NOT Collect

Private keys and seed phrases — Your wallet's private key and mnemonic seed phrase are encrypted with your password and stored locally on your device using Chrome's built-in storage API. They are never transmitted to our servers or any third party.

Passwords — Your wallet unlock password is used locally to decrypt your keystore. It is never sent over the network.

Personal information — We do not collect names, email addresses, phone numbers, IP addresses, or any other personally identifiable information through the extension.

Analytics or telemetry — The extension contains no analytics, tracking scripts, crash reporters, or telemetry of any kind.

Browsing history — Although the extension uses content scripts to provide a dApp provider (window.btcw), it does not read, record, or transmit your browsing activity.

2. Data Stored Locally

The following data is stored on your device using Chrome's chrome.storage.local and chrome.storage.session APIs:

Encrypted keystore — Your private key encrypted with AES-256-GCM, derived from your password via PBKDF2.

Wallet settings — Your node RPC URL, RPC credentials (if configured), and display preferences.

Recent transactions — A local cache of your recent transaction history for display purposes.

Connected sites — A list of websites you have explicitly approved to interact with your wallet.

Session data — Temporary unlocked state stored in session storage (cleared when the browser closes).