Questions
Straight answers about custody, privacy, and the beta.
Does ColdHarbor hold my keys?
No. Recovery words and signing keys are generated on your device and stay there. ColdHarbor has no server that can move your funds and no account that maps to you.
What can the relay see?
The relay forwards a small set of allowlisted requests to Bitcoin infrastructure and never receives private keys. Like any network path, it observes connection-level data for the requests it carries. It cannot sign or spend.
Why Silent Payments instead of a normal address?
A reusable BIP-352 code lets senders derive a unique on-chain output for every payment. You publish one code without creating the address-reuse trail that links payments to a single public address.
Can I receive to a legacy or SegWit address?
For receiving, ColdHarbor presents Silent Payment codes only. Presenting a reused single-use address would undercut the privacy the wallet is built to protect.
Is Monero sent with Silent Payments too?
No. Silent Payments are a Bitcoin-only rail. Monero is held as a distinct privacy asset with its own protocol and controls, and is never labelled as a Silent Payment.
What happens if I lose my recovery phrase?
It cannot be recovered. ColdHarbor is self-custodial by design—there is no reset, no support backdoor, and no cloud copy. Your offline backup is the only copy.
Do you collect analytics?
No accounts, no telemetry SDKs, no behavioural analytics on the wallet, and no email capture on this site. Infrastructure providers may keep basic security logs for the requests they serve.
Is this using real Bitcoin?
Not yet. The current private beta runs on Bitcoin regtest so every send and receive flow can be evaluated end-to-end without monetary value. Mainnet is a later phase.
Which platforms are supported?
A native SwiftUI iOS app and a native macOS desktop wallet share one Swift domain package. Both enforce the same Silent-Payments-only send and receive boundary.
How do I join the beta?
Access is invitation-based on TestFlight and reviewed manually. Approved testers receive the build plus separate, private relay instructions.
Still deciding
Read the security model.
See exactly where keys live, what the relay can reach, and how transactions are reviewed.
Security model