Coti Wallet Privacy Policy – Data Protection & Security

1. Information We Collect

Coti Wallet is designed to minimize data collection while providing you with a secure and functional cryptocurrency wallet experience.

Information You Provide

Wallet Creation: When you create a wallet, all data including your wallet address, private keys, and seed phrase are encrypted and stored locally on your device. We never have access to this information.
Optional Account Information: If you choose to create an optional account for cloud backup features, we may collect your email address for account recovery purposes only.
Support Communications: When you contact our support team, we collect the information you provide to assist you with your inquiries.

Automatically Collected Information

Device Information: We collect basic device information such as operating system (Windows, macOS, or Linux), application version, and device type to ensure compatibility and improve our services.
Usage Analytics: We collect anonymous usage statistics to understand how features are used and to improve the wallet experience. This data is aggregated and cannot be linked to individual users.
Error Reports: When the application encounters errors, we may collect crash reports to diagnose and fix issues. These reports do not contain your private keys or wallet information.

Blockchain Information

Public Blockchain Data: Your transactions are recorded on public blockchains. While we don't control this data, it is publicly accessible to anyone. We access blockchain data through nodes to display your transaction history and balance.
Transaction Metadata: We do not store your transaction history on our servers. All transaction data is retrieved directly from blockchain networks when you use the wallet.

2. How We Use Your Information

We use the limited information we collect only for specific purposes that enhance your experience and maintain the security of our wallet.

Primary Uses

Wallet Functionality: To provide core wallet features including sending, receiving, and managing your cryptocurrencies across multiple blockchain networks.
Security Enhancement: To implement security features, detect suspicious activities, and protect your wallet from unauthorized access.
Service Improvement: To analyze usage patterns, identify bugs, and improve the performance and features of Coti Wallet on Windows, macOS, and Linux platforms.
Customer Support: To respond to your questions, provide technical assistance, and resolve issues you may encounter.
Platform Optimization: To ensure optimal performance across different operating systems and devices.

What We Don't Do

We do not sell, rent, or share your personal information with third parties for marketing purposes.
We do not track your wallet activity across different services or websites.
We do not use your data to build advertising profiles.
We do not have access to your private keys, seed phrases, or wallet passwords.

3. Data Storage and Security

Security is at the core of everything we do. We employ industry-leading security measures to protect your information and ensure your assets remain safe.

Local Data Storage

Device-Level Encryption: All sensitive data, including your private keys and seed phrase, is encrypted using AES-256 encryption and stored locally on your device. This data never leaves your device unless you explicitly choose to export it.
Secure Key Management: Your private keys are generated and managed entirely on your device using cryptographically secure random number generators.
Password Protection: Your wallet data is protected by a password that you create. We do not store your password and cannot recover it if you forget it.

Security Measures

End-to-End Encryption: All communications between your wallet and our servers are encrypted using TLS 1.3 protocol.
Regular Security Audits: Our codebase undergoes regular security audits by independent third-party security firms to identify and address potential vulnerabilities.
Open Source: Our wallet code is open source, allowing the community to review and verify our security practices.
Multi-Layer Protection: We implement multiple security layers including biometric authentication, two-factor authentication, and transaction signing verification.

Platform-Specific Security

Windows: Integration with Windows Credential Manager for secure credential storage and BitLocker compatibility for full-disk encryption.
macOS: Utilization of macOS Keychain for secure storage and FileVault integration for enhanced data protection.
Linux: Support for LUKS encrypted volumes and integration with system keyrings (GNOME Keyring, KWallet) for credential management.

4. Third-Party Services

To provide comprehensive wallet functionality, we integrate with certain third-party services. We carefully select partners who share our commitment to privacy and security.

Blockchain Node Providers

Purpose: To connect to blockchain networks and retrieve transaction data, account balances, and broadcast transactions.
Data Shared: Your public wallet addresses and transaction requests. Private keys are never shared.
Privacy: We use multiple node providers and rotate connections to enhance privacy. You can also configure custom RPC endpoints.

Price Data Providers

Purpose: To display current cryptocurrency prices and calculate portfolio values in various fiat currencies.
Data Shared: Anonymous requests for price information. No personal or wallet data is shared.

Analytics Services

Purpose: To understand application usage and improve user experience.
Data Shared: Anonymous usage statistics and application performance metrics. This data is aggregated and cannot identify individual users.
Opt-Out: You can disable analytics in the application settings at any time.

Optional Integrations

DeFi Protocols: When you interact with decentralized exchanges or DeFi platforms through our wallet, you connect directly to those protocols. Each protocol has its own privacy policy and terms of service.
Hardware Wallet Integration: If you connect a hardware wallet, communication is direct between your device and the hardware wallet. We do not intercept or store this communication.

5. Your Privacy Rights

You have full control over your data and privacy. We respect your rights and provide tools to manage your information.

Access and Control

Right to Access: You have the right to access any personal information we have collected about you. Contact our support team to request a copy of your data.
Right to Deletion: You can request deletion of your account and associated data at any time. Note that blockchain transactions are permanent and cannot be deleted.
Right to Portability: You can export your wallet data, including transaction history and preferences, in standard formats.
Right to Object: You can opt out of optional data collection features such as analytics and crash reporting in the application settings.

Privacy Controls

Analytics Toggle: Disable anonymous usage analytics in Settings > Privacy.
Custom RPC Nodes: Configure your own blockchain node endpoints for enhanced privacy.
Network Privacy: Enable privacy features to minimize information leakage during network requests.
Local-Only Mode: Use the wallet entirely offline for maximum privacy (with limited functionality).

Regional Rights

GDPR (European Union): If you are in the EU, you have additional rights under GDPR including the right to rectification, restriction of processing, and the right to lodge a complaint with a supervisory authority.
CCPA (California): California residents have rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to opt-out of the sale of personal information (we do not sell personal information).
Other Jurisdictions: We respect privacy rights under all applicable local laws and regulations.

6. Cookies and Tracking Technologies

As a desktop application for Windows, macOS, and Linux, Coti Wallet has different tracking considerations compared to web applications.

Application Cookies

Local Storage: We use local storage to save your preferences, application settings, and cached data to improve performance. This data remains on your device and is not transmitted to our servers.
Session Management: Temporary session data is used to maintain your wallet state during active use. This data is cleared when you close the application or log out.
No Third-Party Cookies: We do not use third-party cookies or tracking pixels within the application.

Website Cookies

Our website (where you download the wallet) may use the following types of cookies:

Essential Cookies: Necessary for website functionality, such as remembering your download preferences.
Analytics Cookies: Help us understand how visitors interact with our website. You can opt out of these cookies.
Cookie Management: You can manage cookie preferences through your browser settings or our cookie consent banner.

Do Not Track

We respect Do Not Track (DNT) signals in browsers and honor user privacy preferences.
The desktop application provides granular privacy controls independent of browser settings.

7. Data Retention

We retain different types of data for varying periods based on their purpose and legal requirements.

Local Wallet Data

Permanent Storage: Your wallet data (private keys, addresses, seed phrase) is stored locally on your device indefinitely until you choose to delete it or uninstall the application.
User Control: You have complete control over this data and can delete it at any time through the application or by removing the application data folder.
Backup Copies: If you create backups, you are responsible for managing and deleting those backup files.

Server-Side Data

Optional Account Data: If you create an optional account, we retain your email address and encrypted backup data until you delete your account.
Support Communications: Support tickets and communications are retained for 3 years for customer service and legal compliance purposes.
Analytics Data: Anonymous usage statistics are retained for up to 2 years and then automatically deleted.
Error Logs: Crash reports and error logs are retained for 90 days and then automatically purged.

Account Deletion

Deletion Process: You can request account deletion at any time through the application settings or by contacting support.
Data Removal: Upon account deletion, we remove all associated data within 30 days, except where we are required to retain information for legal or regulatory compliance.
Blockchain Permanence: Please note that blockchain transactions are permanent and publicly visible. We cannot delete transaction history from public blockchains.

8. International Data Transfers

As a global cryptocurrency wallet available on Windows, macOS, and Linux, we may process data across different jurisdictions.

Data Processing Locations

Primary Storage: The majority of your data is stored locally on your device and never transmitted to our servers.
Server Locations: Our servers are located in secure data centers in the United States and European Union, with industry-standard security certifications.
Blockchain Networks: Blockchain data is distributed globally across decentralized networks. We do not control where this data is stored or processed.

Cross-Border Safeguards

Standard Contractual Clauses: When transferring data between jurisdictions, we use Standard Contractual Clauses approved by the European Commission.
Encryption in Transit: All data transferred internationally is encrypted using TLS 1.3 protocol.
Data Minimization: We minimize international data transfers by processing data locally whenever possible and only transmitting essential information.
Regional Compliance: We comply with data protection laws in all jurisdictions where we operate, including GDPR, CCPA, and other regional privacy regulations.

User Choice

Regional Servers: Where available, you can choose to connect to region-specific servers to minimize data transfers.
Local-Only Mode: You can use the wallet in local-only mode to prevent any international data transfers, with limited online functionality.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes

Material Changes: If we make material changes to this Privacy Policy, we will notify you through the application, via email (if you have provided one), or through a prominent notice on our website at least 30 days before the changes take effect.
Minor Updates: For minor changes that do not affect your rights, we will update the "Last Updated" date at the top of this policy.
Version History: We maintain a version history of our Privacy Policy, which you can access on our website to review previous versions.

Your Acceptance

Continued Use: By continuing to use Coti Wallet after changes to this Privacy Policy take effect, you acknowledge and accept the updated policy.
Right to Discontinue: If you do not agree with the updated Privacy Policy, you have the right to stop using the wallet and delete your account.
Review Regularly: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

Questions: If you have questions about this Privacy Policy or our privacy practices, please contact our privacy team through the support section of our website.
Data Protection Officer: For privacy-related concerns, you can reach our Data Protection Officer at the contact information provided on our website.
Transparency Report: We publish an annual transparency report detailing our privacy practices and any data requests we receive from authorities.

Privacy Policy

Our Commitment to Your Privacy