KnightsPurse

Privacy Policy

Effective 21 June 2026 · Last updated 21 June 2026

KnightsPurse is a non-custodial wallet. The most important privacy fact about it is simple: your recovery phrase and private keys are created and kept on your own device, and we never receive them. This policy explains, in plain language, exactly what the software does — and does not do — with information.

In one breath: keys stay on your device · we run no advertising and no third-party analytics · we never sell or share personal data · optional cloud sync is encrypted on your device before it leaves it, so our servers only ever hold data they cannot read.
Contents
  1. Who this covers
  2. Your keys and secrets
  3. What we process, and why
  4. What we never collect
  5. Browser permissions
  6. Third parties
  7. Identity verification
  8. Legal bases (GDPR)
  9. Retention
  10. Your rights
  11. Security
  12. International transfers
  13. Children
  14. Changes
  15. Contact

1. Who this covers

This policy applies to the KnightsPurse browser extension and web application as published by KXCO ("we", "us"). KnightsPurse is also offered as white-label software: where a licensed institution deploys it under its own brand, that institution is the data controller for its deployment and its own privacy policy applies. This document describes the software's behaviour, which is the same in either case.

2. Your keys and secrets stay on your device

Your recovery phrase (seed) and the private keys derived from it are generated locally and stored only on your device. At rest they are encrypted with AES-256-GCM using a key derived from your password with Argon2id. The decrypted phrase exists only in memory while the wallet is unlocked, and is erased when you lock the wallet, close the browser, or after a period of inactivity. We never receive, transmit, log, or store your recovery phrase or private keys, and there is no "forgot password" recovery — only you hold them. All transactions are signed locally on your device.

3. What we process, and why

To function, the wallet exchanges some information with networks and our servers. Here is the complete list:

DataPurposeWhere it goes / how protected
Public addresses & transactions Show balances; broadcast the transactions you authorise Sent to the blockchain RPC endpoints for the networks you use. This information is, by nature, public on the blockchain. This is inherent to every wallet.
Encrypted wallet state (optional sync) Keep your accounts and settings in sync across devices, if you enable sync Encrypted on your device (ML-KEM-768 + AES-GCM) before upload. Our servers store only ciphertext and cannot read it ("zero-knowledge"). Disabled unless you turn it on.
Anonymous usage counts Let us report how many wallets exist and are active, and how many people have downloaded or installed the app Aggregate counts only — a wallet identifier or a random install identifier that is not linked to your keys, balances, or real-world identity. See the callout below.
Known-malicious domain list Warn you before connecting to a known phishing site A public blocklist is downloaded to your device; the check runs locally. Your browsing is not uploaded.
About the anonymous counts. So we can measure adoption, the software reports aggregate, non-identifying signals: a count of downloads, and a randomly generated install identifier that lets us count installations and active users. These identifiers are not connected to your wallet, keys, addresses, or any personal information, and are never used to profile, track across sites, or advertise to you. Operators can disable this reporting entirely.

4. What we never collect

5. Browser permissions, explained

6. Third parties

We do not sell or share your personal data. The wallet does communicate, at your direction, with: blockchain RPC providers for the networks you select (they see public addresses and transactions); and the source of the public phishing blocklist. Decentralised apps you choose to connect to receive only the address(es) and permissions you approve. We do not control those third parties' own data practices.

7. Identity verification (KYC)

The wallet software does not require or collect identity documents. Where a deployment requires identity verification, it is performed by the operating institution through its own verification provider under that institution's privacy policy; KnightsPurse does not store your identity documents.

Where this regulation applies, we rely on: performance of a contract (operating the wallet you chose to use), and our legitimate interests in keeping the software secure and understanding aggregate adoption — balanced against your rights, which is why the usage signals are anonymous. We do not rely on consent for advertising because we do not advertise.

9. Data retention

Encrypted sync data is retained while your wallet uses the service and deleted on request or after prolonged inactivity. Anonymous counts are aggregate and are not tied to you. Local data (your encrypted keystore) lives on your device and is removed when you delete the wallet or clear your browser data.

10. Your rights

Depending on where you live (e.g. the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port personal data, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. Because we hold no keys and only anonymous, unlinked signals, there is typically no personal data tied to you for us to retrieve — but you can contact us and we will respond. You also control your wallet directly: lock it, export your phrase, or delete it and its local data at any time. Deleting the wallet without your recovery phrase is irreversible.

11. Security

Keys are encrypted at rest and never transmitted; sync data is end-to-end encrypted; connections to our services use TLS; sign-in uses both a classical and a post-quantum signature (ML-DSA-65); and the wallet auto-locks after inactivity. No system is perfectly secure, and you are responsible for safeguarding your recovery phrase and device.

12. International transfers

Our service infrastructure may process data in regions including the United Kingdom, the European Union, and the United States. Where data is transferred internationally, we rely on appropriate safeguards. The data involved is limited to encrypted sync ciphertext and anonymous counts.

13. Children

KnightsPurse is not directed to, and is not intended for, children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected in the "Last updated" date above and, where appropriate, highlighted in the app.

15. Contact

Questions or requests about privacy: [email protected]. White-label operators: please direct your users to your own privacy contact.