Privacy Policy

1. Introduction

At Cosmos Wallet, we are committed to protecting your privacy and respecting the principle of self-custody. Unlike custodial platforms or hosted services, Cosmos Wallet operates as a non-custodial desktop application, meaning that your private keys, recovery phrases, and signing approvals remain entirely under your control.

This Privacy Policy is intended to explain in detail how we handle personal and technical information related to the use of our wallet application, companion website, and support services. It covers what information we may collect, how it is stored, how it is used, and under what limited circumstances it may be shared.

The scope of this policy applies to:

• The Cosmos Wallet desktop application for Linux, macOS, and Windows.
• Our official website and related documentation portals.
• Community support channels and direct communications with our team.

By using Cosmos Wallet, you acknowledge and agree to the collection and use of information in accordance with this Privacy Policy. Importantly, the wallet does not collect or transmit your private keys, seed phrases, or the contents of your transactions. Any on-chain activity is publicly recorded on the blockchain and outside the scope of this Privacy Policy.

We encourage all users to review this document carefully and reach out with any questions before using Cosmos Wallet.

2. Information We Collect

Cosmos Wallet is designed to minimize data collection wherever possible. The wallet itself does not require an account, does not store personal identifiers on our servers, and never has access to your private keys or seed phrases. However, certain limited categories of information may be collected when you interact with our software, website, or support services.

2.1 Information You Provide

You may choose to provide personal or technical information in the following situations:

• Support Requests: When you contact us through email, forums, or community channels, you may voluntarily provide your name, email address, or other details needed to address your request.
• Feedback and Surveys: Participation in optional surveys or community feedback forms may include information about your user experience, preferences, or technical environment.
• Crash Reports (Optional:) If you submit a crash or bug report, diagnostic logs may include system details such as operating system version, memory usage, and error traces.
• Newsletter or Updates: If you subscribe to receive updates, your email address will be collected solely for the purpose of sending those communications.

We do not require you to create an account or provide personal identification (such as ID documents, biometrics, or phone numbers) to use Cosmos Wallet.

2.2 Automatically Collected Information

When you use our website or interact with the wallet, some technical data may be automatically collected to ensure functionality and improve user experience. This may include:

• Application Metrics: Anonymous statistics on how often features are used (e.g., staking module opened, governance page viewed). These metrics are aggregated and never tied to individual accounts.
• Performance Data: Information such as load times, error events, and memory usage, used to identify bugs or optimize performance.
• Device & OS Details: Limited data about the type of operating system (Linux, macOS, Windows) and version number to help maintain compatibility.
• Network Information: IP addresses and connection status may be temporarily logged for security monitoring (e.g., preventing DDoS), but are not stored long-term.
• Error Logs: In case of unexpected failures, anonymized logs may be generated to help diagnose technical issues.

No automatically collected information is ever linked to on-chain activity, wallet balances, or your cryptographic keys.

3. How We Use Your Information

Any information collected through Cosmos Wallet or related services is used only for purposes directly connected to functionality, security, and user support. We do not sell your information, use it for advertising, or link it to your blockchain activity.

Service Operation We use technical data to ensure that the wallet software runs smoothly across supported platforms. This includes monitoring feature performance, identifying crashes, and maintaining compatibility with Linux, macOS, and Windows environments.

Security Error logs, diagnostic data, and limited connection information may be analyzed to detect unusual activity, prevent abuse, and strengthen protections against exploits, malware, or unauthorized access. These measures never involve scanning or accessing user wallets or private keys.

Communication If you provide your email for updates, support, or newsletters, we use it only to send information relevant to Cosmos Wallet. We do not share your contact details with third parties for marketing or unrelated purposes.

Support When users reach out with issues, we may review logs or technical details to troubleshoot problems. This helps our team resolve errors, provide instructions, or suggest fixes tailored to your device and operating system.

Analytics Aggregated and anonymized data is used to understand general trends, such as which wallet modules are most frequently used. This helps us prioritize improvements and design features that are more useful for the community.

Compliance Where legally required, we may process limited information (such as storing support communications) to comply with applicable obligations. However, Cosmos Wallet does not operate as a custodian and is not subject to KYC/AML collection requirements.

4. Data Storage and Security

Protecting user information and ensuring the integrity of wallet operations are core principles of Cosmos Wallet. Security is built into every layer of our design.

Local Key Storage Your private keys and seed phrases are always stored locally on your device. They are encrypted with industry-standard algorithms (AES-256 or equivalent) and never leave your computer. We do not and cannot access or recover your private keys — backup responsibility remains entirely with you.

End-to-End Encryption Any optional communication with our servers (for example, crash reports or newsletter sign-ups) is protected using TLS/SSL encryption. Sensitive payloads are encrypted both in transit and at rest.

Cloud Storage (Limited Use) For non-critical functions such as update checks or error log submissions, limited data may be transmitted to secure cloud infrastructure with redundancy and strict access controls. No cryptographic material is ever uploaded or stored.

Redundancy & Backups Our servers (used only for ancillary services such as website hosting and support email) are protected by redundant backup systems and geographically distributed storage. These backups never contain wallet data or private keys.

Access Restrictions Only authorized personnel under strict confidentiality obligations may access limited operational data (e.g., support emails). All such access is logged and periodically reviewed.

Regular Security Reviews We conduct periodic code audits and penetration testing, focusing on both the wallet software and backend systems. Findings are addressed promptly, and results may be shared with the community when possible.

Limitations While we implement robust measures, no system can guarantee absolute security. Users are responsible for safeguarding their recovery phrases and ensuring their devices remain free from malware. Cosmos Wallet cannot retrieve lost keys or recover stolen assets.

5. Information Sharing

Cosmos Wallet does not sell, rent, or trade your personal information. Since the wallet is non-custodial, it does not transmit private keys, seed phrases, balances, or on-chain activity to any third party. However, in limited cases, certain types of information may be shared under controlled conditions:

• Service Providers: We may rely on carefully selected third-party service providers to assist in specific operations, such as hosting our website, delivering newsletters, or processing crash reports. These providers only receive the minimum information required to perform their task and are bound by confidentiality and data protection agreements.
• Legal Requirements: We may disclose limited information if required to comply with applicable laws, legal processes, or government requests. This typically applies only to data voluntarily provided by users (such as support communications or newsletter subscriptions). Cosmos Wallet has no ability to share blockchain transaction data beyond what is already public on-chain.
• Business Transfer: In the event of a potential merger, acquisition, or restructuring, relevant operational data (such as support tickets or mailing lists) may be transferred to the new entity, subject to the same commitments described in this policy. Your cryptographic keys and wallet contents remain fully outside of our custody and are never part of such transfers.
• Consent: In cases not covered above, we will only share your information if you have provided explicit consent. For example, if you choose to participate in a beta testing program that involves sharing diagnostic data, we will clearly inform you of what is being collected and why.

Important: At no point does Cosmos Wallet have access to or share private keys, seed phrases, or user-controlled signing approvals. Any information exchanged is limited to optional metadata or communications that users voluntarily provide.

6. Your Rights and Choices

We respect the rights of users regarding their personal data. While Cosmos Wallet is designed to minimize data collection, certain optional interactions (such as subscribing to updates or submitting support requests) may involve information you provide. In those cases, you retain full control over how your information is used.

• Right of Access: You may request confirmation of whether we process any personal information you have provided (such as your email for newsletters) and obtain a copy of that information.
• Right of Correction: If the information we hold is incomplete or inaccurate, you have the right to request correction or updates (e.g., updating your contact details for support).
• Right of Deletion: You may request the deletion of personal data you have shared with us, such as support emails or mailing list subscriptions. Note that blockchain data (transactions, balances) is outside our control and cannot be altered or removed.
• Right to Restrict Processing: You may request that we limit how your personal information is processed, for example, by unsubscribing from newsletters but keeping your support ticket history.
• Right of Portability: Upon request, we can provide personal data you have voluntarily shared (e.g., email subscriptions) in a portable, machine-readable format.
• Right to Object: You may object to the processing of your information for specific purposes, such as analytics or performance monitoring, if it involves identifiable data.
• Right to Withdraw Consent: Where processing is based on consent (e.g., newsletters, beta programs), you may withdraw that consent at any time. Withdrawal does not affect the legality of prior processing.
• How to Exercise Rights: To exercise these rights, you may contact us directly via the channels listed in Section 9 (Contact Us). We may require minimal verification to confirm your request but will never ask for private keys, recovery phrases, or transaction details.

To exercise these rights, please contact us at privacy@cosmoswallet.com.

7. Data Retention

Cosmos Wallet is designed as a non-custodial desktop application. By default, the wallet does not transmit or store user data on our servers, meaning we hold no information about private keys, seed phrases, balances, or transactions. Any such data is generated and stored locally on your device and remains entirely under your control.

For the limited categories of information we may collect (as described in Section 2), we apply the following retention practices:

• Support Communications: Emails, forum posts, or community messages that you send to us may be retained for as long as necessary to address your inquiry and improve future support. These records are typically kept for up to 24 months, after which they are archived or deleted unless required for legal compliance.
• Newsletter Subscriptions: If you subscribe to receive updates, we retain your email address until you unsubscribe. You can remove your data at any time by opting out through the unsubscribe link or by contacting us directly.
• Crash Reports and Logs: Diagnostic logs submitted voluntarily may be stored temporarily for troubleshooting and analysis. These are normally retained for no longer than 90 days, after which they are securely deleted.
• Analytics Data: Aggregated and anonymized usage data (such as feature usage statistics) may be stored for trend analysis. Since it cannot be linked to individuals, it may be retained indefinitely for research and product improvement.
• Legal Obligations: In cases where data must be retained to comply with laws or regulations, retention periods will be determined by the applicable jurisdiction.
• User Control: You may request deletion of personal information you have provided at any time (see Section 6). Once deleted, the data will no longer be accessible in our systems.

8. International Transfers

Cosmos Wallet is an open-source desktop application that operates locally on your device. The wallet itself does not transmit private keys, recovery phrases, balances, or blockchain activity to any remote server. However, certain limited services — such as our website, support channels, or mailing list infrastructure — may involve data processing outside your country of residence.

• Server Locations: Our web services and mailing tools may be hosted on servers operated by third-party providers in different jurisdictions, including the European Union, the United States, or other regions with established data centers.
• Legal Safeguards: Whenever data is transferred across borders, we apply safeguards designed to ensure equivalent levels of protection. These may include the use of Standard Contractual Clauses (SCCs), encryption in transit and at rest, and compliance with applicable regional data protection laws (such as GDPR in the EU).
• Minimal Scope: The only information subject to transfer is non-critical metadata you voluntarily provide, such as support emails, newsletter subscriptions, or diagnostic reports. Blockchain-related data (transactions, staking, governance activity) remains fully on-chain and is never transmitted by us.
• User Choice: By interacting with our website or providing information through support or subscription services, you consent to the processing and transfer of your data as described in this section. If you do not wish for your information to be processed outside your jurisdiction, you may choose not to use these optional services.
• Important: International transfers do not affect your use of the Cosmos Wallet desktop application itself, which remains fully local and independent of external servers.

9. Children's Privacy

Cosmos Wallet is intended for use by adults and is not designed for individuals under the age of 18. We do not knowingly collect, store, or process personal information from children. Since the wallet is a non-custodial desktop application, it does not require account registration or personal identification, further reducing the risk of unintended collection of children’s data.

If you are a parent or guardian and believe that a child under 18 has provided us with personal information (for example, through a support request or newsletter subscription), please contact us immediately. We will promptly investigate and, where appropriate, delete such data from our systems.

We strongly encourage parents and guardians to supervise the use of blockchain applications by minors, as cryptocurrency networks themselves are public and outside the control of Cosmos Wallet.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or the way our services operate. When updates are made, we will:

• Post the revised Privacy Policy on this page with a new “Last Updated” date.
• Provide a summary of key changes at the top of the document, where appropriate.

In cases of significant changes (for example, introducing new optional services involving personal data), we may notify users directly through the website, community channels, or email (if you are subscribed).

We encourage you to review this Privacy Policy periodically to stay informed about how your information is handled. Your continued use of Cosmos Wallet after updates are published will constitute your acceptance of the revised terms.

11. Contact Information

If you have any questions about this Privacy Policy, the way we handle data, or your rights as described in Section 6, you can reach out to us through the following channels: