WWT Wallet · Privacy policy / Політика конфіденційності

Working title. This policy describes what the service actually stores. It does not create a legal entity, a licence, an audit, insurance or any guarantee of funds.

What stays only on your device

• The recovery phrase (BIP39) and the private key, encrypted in the browser's local storage with a key made of your PIN and a random secret kept on the server (and, when available, a copy of the same encrypted blob in Telegram SecureStorage).
• Your PIN. It is never transmitted; the server only checks a derived verifier and keeps a random secret that completes the encryption key, released after the verifier matches (with an attempt limit).
• Preferences: language, theme, hidden balance, auto-lock.

What the server stores

• Session identifiers, their creation and expiry times, and a hash of the browser user agent.
• When you sign in through Telegram: your Telegram user id (numeric) and the time of sign-in. Not your contacts or messages.
• Your public wallet address once you prove ownership with a signed message, and the signed challenge itself.
• Transfer terms (quotes), the transactions you signed, their ids and statuses, resource orders and refunds.
• The indexed history of TRC-20 transfers of your address on the configured network (public blockchain data) and the last cached balance.
• Technical logs with request ids, error messages and IP-based rate-limit counters (kept 24 hours). Secrets are redacted from logs.

What the server never stores

• Recovery phrases, private keys, PINs or unencrypted backups.
• Screen recordings, session replays, analytics or advertising trackers. The page loads no third-party script other than Telegram's WebApp SDK.

Optional encrypted backup files

A separate backup password encrypts the recovery data on your device. The password is never sent to the server. Downloading or sharing a file does not automatically sync it to iCloud. If you choose “Send to my Telegram”, the server relays the encrypted file in memory to your own private bot chat without saving it to the service database, disk or logs. Telegram stores the chat attachment under its own policies. Copies you save in iCloud Drive are stored by Apple under your account. Keep the password separately; the service cannot reset it.

The encrypted file can be decrypted independently of the old PIN record. Setting a new PIN in the Mini App still requires the service. A compromised device or modified application can expose secrets before encryption; encryption is not a guarantee against every attack.

Network: mainnet

Blockchain transactions are public and permanent. Transaction ids, addresses and amounts are visible to anyone on the TRON network and in public explorers.

Deletion

Removing the wallet from the device erases the encrypted copy locally. Server-side records (sessions, transfer history for the address) can be deleted on request through the support contact: https://t.me/WWTWalletBOT; blockchain data cannot be deleted.

Version 0.1.0