Privacy Policy

1. Overview

CryptKeeper ("we," "us," or "our") is a non-custodial Web3 wallet. This Privacy Policy explains how we handle information when you use our website at www.cryptkeeper.rip and our wallet application at app.cryptkeeper.rip (collectively, the "Services").

The short version: CryptKeeper is designed to minimize data collection. We do not collect, store, or transmit your private keys, seed phrases, wallet balances, or transaction history.

2. Information We Do NOT Collect

• Seed phrases or mnemonic words
• Private keys or wallet passwords
• Wallet addresses or account balances
• Transaction history or blockchain activity
• Personal identification information (name, email, phone number)
• Location data or IP addresses (we do not operate servers that process wallet data)

3. How the Wallet Works

CryptKeeper runs entirely in your browser or desktop application. Your seed phrase is generated locally on your device using BIP39 standards, encrypted with AES-GCM (PBKDF2, 310,000 iterations, SHA-256), and stored in your browser's local storage. Private keys are derived in memory and never persisted to disk in plaintext.

All blockchain interactions (balance checks, transaction signing, token transfers) occur directly between your device and public blockchain RPC endpoints. CryptKeeper does not operate intermediary servers for wallet operations.

4. Third-Party Services

The wallet application communicates with the following third-party services for functionality:

• CoinGecko API — Token prices, market data, and token metadata. Subject to CoinGecko's privacy policy.
• DeFiLlama API — DeFi yield and staking pool data. No user data transmitted.
• Li.Fi API — Cross-chain swap and bridge quotes. Wallet address is sent to obtain quotes. Subject to Li.Fi's privacy policy.
• Blockchain RPC Providers — Public RPC endpoints for each supported blockchain. Your wallet address is transmitted to query balances and broadcast transactions.
• WalletConnect — Optional dApp connectivity. Subject to WalletConnect's privacy policy.
• Reservoir / Magic Eden — NFT data retrieval. Wallet address is sent to fetch NFT holdings.

We do not control the data practices of these third-party services. We encourage you to review their respective privacy policies.

5. Website Analytics & Advertising

Our marketing website (www.cryptkeeper.rip) may use third-party advertising networks including BitMedia and Coinzilla. These services may use cookies or similar tracking technologies to serve relevant advertisements. The wallet application (app.cryptkeeper.rip) may also display advertisements from these networks.

We do not use Google Analytics or any first-party analytics on the wallet application.

6. Cookies

The wallet application uses browser local storage (not cookies) to store your encrypted wallet data. Third-party advertising partners may set their own cookies. You can manage cookie preferences through your browser settings.

7. Data Security

Your wallet data is encrypted locally using AES-GCM with PBKDF2 key derivation. We cannot access, recover, or reset your wallet because we never have access to your encryption password or seed phrase. If you lose your seed phrase, your wallet cannot be recovered by anyone, including us.

8. Children's Privacy

CryptKeeper is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Services constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy, you can reach us through our GitHub repository or community Discord.