Privacy Policy

H-Cash Wallet is a browser wallet extension. This policy explains what information stays local in the browser, what information may be processed by connected backend services, and how that information is used.

Information that stays local

Your recovery phrase, private keys, vault password, and decrypted wallet data are kept in your browser. H-Cash Wallet does not send this information to backend services, support channels, email, or any unrelated third-party website. The encrypted vault is stored locally by Chrome and protected with your vault password.

Information that may be processed by backend services

When you use connected market or wallet services, the backend may process public wallet addresses, signed login challenges, balances, orders, deposits, withdrawals, transaction hashes, timestamps, and operational security logs needed to run the service.

Information we do not collect

We do not collect your recovery phrase, private keys, vault password, browsing history, contacts, precise location, payment card data, or unrelated website activity.

How information is used

Information is used only to operate wallet and market features, verify signed sessions, process deposits and withdrawals, match orders, calculate fees, detect abuse, comply with legal obligations, troubleshoot issues, and secure the platform.

Any information received from Chrome extension APIs is used only to provide or improve the declared wallet functionality and is not sold or used for advertising.

Blockchain data

Blockchain transfers happen on public networks or public blockchain indexers. Public transaction data may include wallet addresses, transaction IDs, amounts, and timestamps. This public blockchain data cannot be deleted by the wallet extension.

Sharing

We do not sell personal information. Information may be processed by infrastructure providers used to host, secure, monitor, or operate the service. We may disclose information when required by law, to protect users, or to investigate security incidents.

Security

The extension uses local vault encryption, limited permissions, inactivity locking, and signed authentication where applicable. No online system can be guaranteed risk-free, so users should keep recovery phrases offline and start with small test amounts.

Retention

Market ledger, order, trade, deposit, withdrawal, fee, and security records may be retained as long as needed for accounting, audit, fraud prevention, dispute handling, legal compliance, and service integrity. Local wallet data remains under the user's control in the browser.

User controls

You can lock the wallet, delete individual wallets, reset the local vault, or remove the extension. Resetting the extension removes local wallet data from that Chrome profile but does not delete public blockchain history or market records already needed for ledger integrity.

Changes

We may update this Privacy Policy when the wallet, connected services, infrastructure, or legal requirements change. The updated version will be posted on this page with a new date.

Contact

For support and privacy questions, use the official Telegram community:
https://t.me/CaratProtocol