01The data we collect

ColdHarbor collects nothing. The app ships with no analytics SDK, no crash reporter, no advertising identifiers, and no account system. We do not know who you are, what you hold, or where you connect from — and we cannot be compelled to hand over records we never created.

02What stays on your device

Your keys, balances, addresses, and transaction history are generated and stored on your device, encrypted with your passcode. No copy exists on our infrastructure, and no cloud backup is made unless you export one yourself.

Deleting the app deletes everything it knew. Your 24-word recovery phrase — written down by you, held by you — is the only durable record.

03Network traffic

A wallet must talk to a network to move money; that is the only traffic ColdHarbor produces. By default, queries travel through a privacy-preserving gateway that does not link them to an identity and keeps no logs pairing addresses with IPs.

Harbor Mode removes even that intermediary: point the app at your own node and every balance is verified against blocks you validated yourself, with nothing leaving your machine.

04Third-party services

Swap quotes are fetched over an anonymized channel from providers that require no registration. A provider sees only the order it needs to execute — never your name, your email, or your IP. We integrate no other third-party services.

05Changes to this policy

This policy ships inside the app and is versioned with it; any change arrives in release notes you can read before updating. One commitment does not change: a future feature that would transmit data will always be opt-in, and always off by default.