GeoWallet Privacy Policy
What we store, and where
- Your recovery phrase and private keys are encrypted with your password and stored locally in your browser (extension storage / IndexedDB). They are never transmitted to us or anyone else. We cannot see, recover, or reset them.
- Local preferences — selected networks, custom RPC URLs, address book labels, and any optional API keys you enter (Alchemy, Etherscan, WalletConnect) — are stored locally in your browser only.
- Optional fingerprint unlock uses your device's WebAuthn authenticator to wrap your password locally; no biometric data leaves your device.
Network requests
Like any wallet, GeoWallet must talk to public infrastructure to function. These requests necessarily expose your public wallet address and your IP address to the endpoint you are contacting (this is inherent to any internet request and is not data we collect):
- Blockchain RPC endpoints — to read balances and to broadcast transactions that you approve.
- CoinGecko — to display token prices in USD.
- Alchemy / Etherscan — only if you add your own API keys, to show NFTs and transaction history.
- WalletConnect (Reown) relay — only if you enable it with a project ID, to connect to mobile dApps.
We do not add tracking parameters, identifiers, or analytics to these requests.
Permissions (browser extension)
storage— to keep your encrypted vault and local settings on your device.tabs— to identify which site is making a connection or signing request so approvals and responses go to the correct page.- Content scripts on all sites — to inject the standard wallet provider so decentralized apps can request a connection. You explicitly approve every connection and every signature; the wallet never signs or shares anything without your confirmation.
What we never do
- We never collect or transmit your recovery phrase, private keys, or password.
- We never run third-party analytics, advertising, or trackers.
- We never sell or share your data — we don't have it.
Data deletion
Using Reset in the wallet, or removing the extension / clearing browser data, permanently deletes all locally stored GeoWallet data from your device. Because nothing is stored on our servers, there is nothing for us to delete on your behalf.
Children
GeoWallet is not directed to children under 13.
Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
Contact
Questions or requests: the WinLEW community Discord.