Privacy

Your keys stay with you. So does almost everything else.

Last updated November 1, 2026. This covers the Ecrin Wallet browser extension, the website at ecrinprotocol.app and the Ecrin alerts.

Ecrin Wallet (browser extension)

Your recovery phrase never leaves your computer. It is stored only encrypted with your password (PBKDF2-SHA256, then AES-256-GCM), in the browser's own extension storage. While the wallet is unlocked it sits in memory only, and auto-lock wipes it. Ecrin has no copy and can't recover it.
No account, no analytics, no tracking. The extension doesn't collect your name, email, browsing history or any usage data, and it has no advertising.
What it stores on your computer: the encrypted phrase, your settings (network, theme, auto-lock, number style) and the addresses you have sent to, so it can warn you the first time you send somewhere new. Nothing of this is sent to us.
Who it talks to. To show balances and send transactions, it connects to public blockchain servers: Solana's devnet server and PublicNode's servers for Ethereum-style networks. For prices it asks CoinGecko. Like any website, those services see your IP address and the public wallet address being looked up. Your transactions are public on the blockchain by nature.
Permissions. storage keeps the encrypted wallet and settings; alarms runs auto-lock; clipboardWrite copies your address when you ask. It can read no web page.

Connecting a wallet happens in your wallet app. The website never sees your keys. Names you give to addresses are kept in your browser only.
Alerts are optional. If you turn them on, we keep what's needed to send them: the public vault address you follow, plus your Telegram chat ID, your email address (only after you confirm it) or your browser's push subscription, and your language.
Ecrin Wallet waitlist: your email and language, only after you confirm.
Providers: Cloudflare hosts the site and stores alert subscriptions; Resend sends email; Telegram delivers Telegram messages; your browser's push service (Google, Apple, Mozilla or Microsoft) delivers notifications.
We don't sell or share any of it, and we don't use it for anything but the alerts or the waitlist you asked for.

Wallet: Settings → Remove wallet from this browser, or uninstall the extension. Your money stays on the blockchain; your recovery phrase brings it back.
Email alerts and waitlist: every email has an unsubscribe link, which deletes your address.
Telegram: send /stop to the Ecrin bot. This device: Alerts → This device → Turn off.

Questions or a deletion request: open an issue on GitHub. Ecrin is a beta on test networks and isn't audited yet: use test coins only.