> For the complete documentation index, see [llms.txt](https://docs.openstamp.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.openstamp.io/openstamp-wallet/openstamp-wallet-privacy-policy.md). # OpenStamp Wallet Privacy Policy Effective date: August 24, 2026 OpenStamp.io Inc. ("OpenStamp", "we", "us") provides the OpenStamp Wallet Chrome extension. This policy explains how the extension handles data. ### Self-custody and local wallet data Recovery phrases, private keys, and the wallet password are processed locally on the user's device. Recovery phrases and private keys are stored in an encrypted local vault using AES-256-GCM with a key derived through PBKDF2-SHA256. OpenStamp does not receive or store the wallet password, recovery phrase, or private key. The extension also stores wallet names, account names, selected address type, language, auto-lock setting, and connected-site permissions locally in Chrome extension storage. This information remains on the device until the user resets or uninstalls the wallet or clears extension data. ### Network data To provide wallet functionality, the extension sends public blockchain information to the following services over HTTPS: * `openstamp.io`: SRC-20 balances and token metadata, marketplace fee rates, and openstamp.io wallet integration. * `mempool.space`: BTC balances, UTXOs, fee recommendations, transaction lookup, and transaction broadcast. * `blockstream.info`: fallback BTC balances, UTXOs, fee estimates, transaction lookup, and transaction broadcast. Requests may include public Bitcoin addresses, transaction IDs, and signed raw transactions. A broadcast transaction necessarily includes its public inputs, outputs, recipient addresses, and amounts. These services may also receive technical request data such as the user's IP address through normal HTTPS operation and may retain server logs under their own policies. Recovery phrases, private keys, and wallet passwords are never included in these requests. ### Website integration The extension injects the `window.openstampWallet` provider on `https://openstamp.io` and on the local OpenStamp Portal test origins `http://localhost:6006` and `http://127.0.0.1:6006`. It handles wallet connection, account, signing, and transaction requests initiated through those sites. The extension does not collect general browsing history and does not read unrelated websites. The extension stores the openstamp.io connection permission and connected public wallet address locally so the user can review and revoke access. ### Analytics, advertising, and sale of data The extension does not include advertising, behavioral analytics, or cross-site tracking. OpenStamp does not sell recovery phrases, private keys, wallet passwords, public wallet addresses, transaction data, or browsing data. Data is used only to provide and secure the wallet features described in the Chrome Web Store listing. OpenStamp does not permit employees or contractors to read recovery phrases, private keys, or wallet passwords because those secrets are not transmitted to OpenStamp. ### Security The extension uses encrypted local storage for wallet secrets and HTTPS for external requests. Users are responsible for protecting their device, wallet password, and recovery phrase. Blockchain transactions are public and cannot generally be reversed after broadcast. ### User choices and deletion Users can disconnect openstamp.io from Settings. Users can remove locally stored wallet information by using the wallet reset function, clearing the extension's storage, or uninstalling the extension. Data already published to the Bitcoin blockchain cannot be deleted. ### Changes We may update this policy when wallet functionality or data practices change. Material changes will be disclosed before new data practices take effect where required. ### Contact Questions about this policy can be sent to .