Privacy Policy
Cockroach Wallet is a non-custodial browser wallet. This policy explains what data the wallet handles and who it talks to.
1. What the publisher collects
Nothing.
Cockroach Chain Corp operates no server for the wallet and receives no data from it: no analytics, no tracking, no advertising, no account system, no crash reports.
2. Data handled on your device
| Data | Where it stays | Purpose |
|---|---|---|
| Recovery (seed) phrase | Encrypted with your password (PBKDF2-SHA256, 600,000 iterations + AES-256-GCM) in the browser’s extension storage | Restoring your keys |
| Your password | Never stored; used only to decrypt the seed phrase | Unlocking |
| Private keys | While unlocked, in memory-only session storage; wiped on lock, auto-lock and browser exit | Signing transactions you confirm |
| Public addresses, enabled networks, added tokens, language, auto-lock time, transaction safety data (last block height, sequence, nonce, pending tx hash) | Extension storage on your device | Showing balances and protecting against replayed or duplicate transactions |
We never see your seed phrase, password or keys and cannot recover them.
3. Data sent to blockchain nodes
To show balances and send transactions, the wallet connects directly to public blockchain nodes (RPC / REST endpoints) for the networks you enable:
*.publicnode.comEthereum, BNB Smart Chain, Polygon, Arbitrum, Optimism, Base, Avalanche, Sepolia, Cosmos Hub, Osmosis, Celestia, Akashapi.noble.xyzNoblestride-api.polkachu.comStride
These requests contain your public address(es) and, when you confirm a transaction, the signed transaction. Like any website, these node operators can see your IP address. Public addresses and transactions are visible on the blockchain by design. Node operators have their own privacy policies.
If you replace a network’s RPC / REST endpoint in the wallet settings, these requests go to the server you entered instead, under that server’s own policy.
If you open a transaction in a block explorer (for example Etherscan or Mintscan), that page is opened in a new browser tab under the explorer’s own privacy policy.
4. Permissions
storage: to keep the encrypted wallet and settings on your device.alarms: to auto-lock the wallet after inactivity.
The extension has no host permissions, no content scripts and does not read or change the websites you visit. No other extension or website can send messages to it.
5. This website
wallet.cockroachchain.com is a static website. It sets no cookies, runs no scripts, uses no analytics or advertising, and loads no third-party content; fonts and images are served from this domain. Like any web host, our hosting provider processes your IP address and request details to deliver the page and protect it against abuse. We don’t use these logs to identify or profile visitors.
The main site cockroachchain.com is covered by its own website privacy policy.
6. Children
The wallet is not directed at children under 18.
7. Changes
If this policy changes, the new version will be published at this address with a new effective date.
8. Contact
Questions: cockroachchain.com/contact. Security reports: cockroachchain.com/security.