Principle
The most private data is the data never collected. ColdHarbor has no user accounts, no login, and no profile that maps activity to a person. What follows describes the limited data that infrastructure necessarily touches, and what we deliberately avoid.
This website
The marketing site does not intentionally use advertising trackers or behavioral analytics, and it does not capture email addresses. It sets no marketing cookies. Basic hosting logs—such as IP address and request metadata—may be processed by infrastructure providers for security, abuse prevention, and reliability, and are retained only as long as those purposes require.
The wallet
The wallet does not require a ColdHarbor account. Recovery words and signing keys are generated on your device and are intended to remain there; they are never transmitted to ColdHarbor. The app contains no analytics SDKs and reports no usage telemetry.
Making a payment is inherently a network action. To read balances or broadcast a transaction, the wallet contacts a relay, which forwards allowlisted requests to Bitcoin infrastructure. As with any network path, the relay and underlying network observe connection-level data for the requests they carry. They never receive your keys and cannot move your funds.
What the relay retains
The relay authenticates beta clients with a bearer token and applies rate limiting. It is designed to forward the minimum necessary and to avoid building a durable profile of a client's activity. It does not store recovery material or unsigned intent.
Beta applications
If an external beta application form is configured, that third-party service applies its own privacy terms to whatever you submit. Review them before providing any information. ColdHarbor keeps beta contact details separate from wallet usage.
Your control
Because there is no account, there is nothing to log into and nothing central to delete. Removing the app and your local backup removes your data. Recovery is your responsibility; ColdHarbor cannot restore a lost phrase.
Contact
A dedicated privacy contact will be published before any public mainnet release. During the private beta, questions can be raised through your beta invitation channel.