Privacy Policy

This Privacy Policy describes how cxcash.app ("we," "us") handles information in connection with the cxcash.app wallet software and website (the "Service"). We designed the wallet to minimize data collection.

What we do not collect

We never receive, transmit to our servers, or store your recovery phrase (seed), private keys, or wallet password. Those secrets are generated and encrypted locally in your browser and remain on your device unless you choose to export or back them up yourself.

Data stored on your device

When you use the wallet, the following may be stored locally in your browser (for example, in encrypted form or in local storage):

• encrypted wallet vault and settings;
• public addresses derived from your keys;
• preferences such as network and display options; and
• cached balance or transaction data fetched from public networks.

This data stays on your device unless you clear site data or uninstall the app. We do not have access to it.

Third parties when you use features

When you interact with blockchains or optional features, other parties may process data:

• RPC nodes and indexers — To show balances and broadcast transactions, your public addresses and transaction data are sent to blockchain RPC providers and indexers you or we configure. Those providers may log your IP address and request metadata.
• Price and market data APIs — May receive your IP address and generic request information when the wallet fetches fiat prices or token metadata.
• WalletConnect — Connecting to dApps uses the WalletConnect relay; session metadata and your public addresses may be visible to the relay and the dApp you approve.
• Fiat on-ramp / off-ramp providers — If you use MoonPay, Ramp, Transak, or similar services, you leave our wallet interface and those providers collect personal data and perform KYC/AML under their own privacy policies. We do not receive your KYC documents from them unless they choose to share data with us under their policies.
• CoinExchange and swaps — Swap or trading flows may be handled by CoinExchange or other third parties subject to their policies.

Coin request form

If you submit the optional "request a coin" form, your coin name, symbol, and optional email address are sent to the CoinExchange API so you can be notified about listing requests. That service may store this information on CoinExchange infrastructure. For rate limiting and voting, your IP address may be hashed and stored by that API; we do not maintain a separate database of coin requests on our servers.

Analytics, advertising, and trackers

We do not use third-party analytics, advertising networks, or cross-site tracking pixels in the cxcash.app wallet as shipped by cxcash.app. We do not sell your personal information.

Cookies

We do not use cookies for tracking. The Service may use browser local storage and similar technologies strictly to operate the wallet on your device. Any session data required by WalletConnect or third-party ramps is governed by those providers.

Retention

We retain only information we actually receive (for example, emails you send us, or data described in the coin request flow on third-party systems) for as long as needed to operate the Service, comply with law, or resolve disputes. Local wallet data retention is controlled by you on your device.

Security

We use reasonable measures to protect any information we hold. No method of transmission or storage is completely secure. You are responsible for device security, malware protection, and keeping your recovery phrase offline and private.

Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children.

International users

The Service is operated from the United States. If you access the Service from other regions, you understand that data processed by third-party providers may be transferred internationally according to their policies.

Your rights

Depending on your location (including rights under the GDPR, UK GDPR, or CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of personal information we hold about you, or to object to certain processing. Because we do not hold your keys or wallet contents, we cannot delete on-chain data or data stored only on your device — you may clear browser storage to remove local wallet data.

For email or other information you submitted to us (for example via contact or coin-request flows where we are a controller), contact us to exercise your rights. We will respond within timeframes required by applicable law.

Changes

We may update this Privacy Policy. The "Last updated" date at the top will change when we do. Material changes will be posted at https://cxcash.app/privacy.

Contact

cxcash.app — privacy inquiries: support@coinexchange.cash. See also Contact.