Privacy Policy

This Privacy Policy explains how Casarc Wallet (“Casarc”, “we”, “us”) processes information when you visit our website and/or use the Casarc Wallet browser extension (the “Services”). Casarc Wallet is designed to be non-custodial: your keys are intended to stay under your control.

1) Non-custodial design (important)

Casarc Wallet is designed so that your seed phrase and private keys are created locally in your browser, encrypted with your password, and stored only on your device. Your keys are not intended to be transmitted to a remote server. We do not request your seed phrase by email, forms, or support chat.

2) Information we may process

Depending on how you use the Services, we may process:

• Service communications: if you email us, we receive your email address and the content of your message.
• Basic technical data: IP address, user-agent, and request metadata may be processed by hosting and security providers for performance and abuse prevention.
• Authentication identifiers (if you use sign-in features): if the extension offers sign-in, identifiers from the method you choose (for example, an email address for email sign-in, or an OAuth provider user identifier for Google/X sign-in) may be processed to provide sessions.
• Local encrypted wallet data: the extension stores encrypted wallet data locally on your device. Encryption is intended to use PBKDF2 and AES-GCM with your password so only you can decrypt and access this data.
• Optional encrypted remote vault (if enabled): if you enable remote backup/sync features, an encrypted vault may be stored remotely to help you restore across sessions/devices. This vault is intended to remain encrypted.

3) Information we do not collect

• We do not ask for your seed phrase via email, forms, or DMs.
• We do not sell your personal information.
• We do not intentionally collect sensitive personal data (such as government IDs).

4) How we use information

We use information to:

• Provide and operate the Services (including login/session management, where applicable).
• Operate security features (fraud/abuse prevention, rate limiting, bot protection).
• Send transactional messages you request (such as login codes or verification emails), where applicable.
• Respond to support requests.
• Maintain and improve reliability of the Services.

5) Cookies and similar technologies

The website may use minimal cookies or local storage for basic functionality (for example, session or preference storage). Infrastructure providers may also set security-related cookies for bot mitigation and abuse prevention.

6) Sharing of information

We may share limited information with service providers that help us run the Services, such as hosting/security, authentication/back-end infrastructure, and email delivery for transactional emails (when enabled). We share only what is necessary to provide the Services. We may also disclose information if required by law or to protect our rights, users, and the public.

7) Data retention

We retain personal data only as long as needed for the purposes described above, unless a longer retention period is required by law. Support emails are retained as needed to resolve issues and for record-keeping.

8) Security

We use reasonable administrative, technical, and organizational measures to protect information. However, no method of transmission or storage is 100% secure. You are responsible for keeping your device secure and for safeguarding your wallet backup/seed phrase.

9) Your choices and rights

Depending on your location, you may have rights to access, correct, or delete personal data. You can request help by contacting casarc@casarcwallet.com.

10) Children’s privacy

The Services are not directed to children. We do not knowingly collect personal data from children.

11) International transfers

Our providers may process data in different countries. Where applicable, we rely on appropriate safeguards for cross-border transfers.

12) Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above. Continued use of the Services means you accept the updated policy.

If you have questions about this policy, email us at casarc@casarcwallet.com.