Privacy Policy

Overview

Arksat Wallet is committed to protecting your privacy. This privacy policy explains how we handle your data when you use our Chrome extension.

Data Collection

What We DO NOT Collect

• Personal information (name, email, phone number, etc.)
• Browsing history or activity
• IP addresses or location data
• Analytics or usage statistics
• Private keys or mnemonic phrases
• Transaction details or wallet balances
• Any data from connected dApps

What We DO Store (Locally Only)

The following data is stored exclusively in Chrome's encrypted local storage on your device:

• Encrypted wallet data: Private keys and mnemonic phrases (encrypted with your password)
• User settings: Language preference, network selection, auto-lock timer
• Transaction cache: Local cache of your transaction history for faster loading
• Connected sites: List of dApps you've connected to (for permission management)

Important: This data never leaves your device and is never transmitted to our servers or any third parties.

Third-Party Services

Arksat Wallet connects to the following external services to provide wallet functionality:

Blockchain & Price Data

• mempool.space: Bitcoin blockchain data and transaction status
• CoinGecko API: Real-time BTC/USD price information

Ark Protocol Services

• arkade.sh: Ark Protocol Layer 2 transaction processing
• boltz.exchange: Lightning Network atomic swaps

These services may have their own privacy policies. We recommend reviewing them:

• Mempool.space Privacy
• CoinGecko Privacy Policy

Chrome Permissions

Arksat Wallet requests the following Chrome permissions:

storage

Used to store encrypted wallet data locally in Chrome's secure storage.

alarms

Used to schedule automatic VTXO renewal checks to protect your funds.

notifications

Used to notify you of important wallet events (VTXO expiration, auto-renewal completion, etc.).

activeTab & scripting

Used to enable dApp integration by injecting the wallet provider API into web pages.

Host Permissions

Access to specific API endpoints (listed above) and all websites for dApp integration. We only inject the wallet API and do not read or modify webpage content.

dApp Integration

When you connect Arksat Wallet to a decentralized application (dApp):

• You must explicitly approve each connection
• You must confirm every transaction
• You can view and disconnect connected sites anytime in Settings
• We do not track which dApps you connect to
• We do not monitor your dApp activity

Data Security

We implement the following security measures:

• Encryption: All sensitive data (private keys, mnemonic phrases) is encrypted using AES-256-GCM with PBKDF2 key derivation (100,000 iterations)
• Password Protection: Your password is hashed using SHA-256 and never stored in plain text
• Auto-Lock: Wallet automatically locks after a period of inactivity (configurable from 30 seconds to 4 hours)
• Local Storage Only: All data remains on your device in Chrome's encrypted storage

User Rights

You have complete control over your data:

• Access: All your data is stored locally and accessible only to you
• Export: You can export your mnemonic phrase anytime from Settings
• Delete: You can clear all wallet data from Settings or by uninstalling the extension
• Portability: Your mnemonic phrase can be imported into any BIP39-compatible wallet

Children's Privacy

Arksat Wallet is not intended for use by children under 13 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the "Last Updated" date at the top of this page. Continued use of Arksat Wallet after changes constitutes acceptance of the updated policy.

Disclaimer