Biscuit Wallet
Privacy policy
Last updated
In short
- Biscuit has no accounts, no analytics and no crash reports.
- Your keys, seeds, balances and transactions stay on your computer.
- This website uses no cookies and keeps no access logs.
- One exception: when you create an exchange swap, our server records your IP address, user agent, language and the swap ID, encrypted, for 12 months, because our swap partner requires it. Details below.
The app
Wallet files are encrypted with your password and stored on your computer. Biscuit never sends your seeds, keys, balances, labels or history to us or to anyone else.
To work, Biscuit connects to other services. Each one can see your IP address, unless Tor mode is on:
| Service | Why |
|---|---|
| Monero nodes | Sync your Monero wallet and send transactions |
| Electrum servers | Sync your Bitcoin and Litecoin wallets and send transactions |
| biscuitwallet.com | Prices, currency rates, Monero crowdfunding proposals, the Journal and update checks. You can turn this off in the settings. |
| Atomic swap servers and market makers | Find offers and run atomic swaps |
| Biscuit’s server and Trocador | Exchange swaps, see below |
Our server fetches prices (from CoinGecko), currency rates (from the European Central Bank) and crowdfunding proposals (from getmonero.org) itself, and serves the same copy to everyone, so those sources never see you. It keeps no access logs. In Tor mode, Biscuit also asks it from time to time whether its connection really arrives through Tor: the answer is only yes or no, and nothing is kept.
The other services are run by others and have their own policies. Read Tor mode for what Tor changes.
Exchange swaps and our server
Exchange swaps are provided by Trocador and the exchanges it works with. Biscuit reaches Trocador through our server, relay.biscuitwallet.com, which adds our partner key so that it never ships inside the app. Its source code is public: you can read exactly what it records, and what it doesn’t. Trocador shares part of the exchange’s fee with us: you pay the same as on the exchange, and it never changes how offers are ranked.
- What we record
- When you create an exchange swap, and only then: your IP address, your user agent (Biscuit’s version and your operating system), your system languages, the swap ID and the time.
- Why
- Trocador requires it as a condition of offering exchange swaps, so that its partners can prevent fraud and answer legal requests.
- How it is protected
- Each record is encrypted the moment it is written, with a key that is kept offline. The server itself cannot read what it has recorded.
- How long
- 12 months. Older records are deleted automatically.
- Who can see it
- No one, unless authorities make a request through Trocador. We only answer requests that reach us from Trocador. We never sell or share these records for any other reason.
- What we do not record
- Rates, coin lists, offers you look at, or the progress of your swaps. To stop abuse, the server counts requests per IP address in memory only: requests for a minute, swap creations for up to a day, then it forgets them.
Trocador and the exchange receive the details a swap needs, such as addresses and amounts. Because each swap must be traceable to the IP address it came from, exchange swaps can’t be created through Tor. If you prefer that none of this be recorded, use an atomic swap: it doesn’t use our server, and works over Tor.
This website
biscuitwallet.com uses no cookies, no analytics, no scripts and nothing loaded from other sites. Our server keeps no access logs: it is the same public program as the swap relay. It is hosted by 1984 Hosting in Iceland.
If you write to us, we receive your message and email address through Tuta (tutamail.com). We keep the conversation only as long as it is useful and delete it on request.
Your rights
You can ask what we hold about you, and ask us to correct or delete it. For an exchange swap, send us its swap ID so we can find the record. We may have to keep a swap record until the end of its 12 months where our partner’s requirements oblige us to. You can also complain to the data protection authority where you live.
Contact: biscuitwallet@tutamail.com
Changes
If this policy changes, the new version will be published here with its date, and announced in the Journal if the change matters.