LEGAL COMPLIANCE & GOVERNANCE

Privacy Policy

Non-Custodial Web3 Sovereign Data Protection · Last Updated: September 2026

1. Core Architectural Principle: Non-Custodial Architecture

Wallet B+ operates exclusively on a 100% non-custodial, client-side execution model. We do not operate accounts in the traditional web banking sense, nor do we act as a custodian, broker, or financial intermediary.

Your private cryptographic keys, BIP-39 mnemonic seed phrases, and security PINs are generated in local browser memory using cryptographically secure pseudorandom number generation (Web Cryptography API CSPRNG). At no time are these secrets transmitted over any network, saved to external databases, or accessible by Wallet B+ engineers or administrators.

2. Data We Do Not Collect

Consistent with our sovereign infrastructure principles, Wallet B+ does NOT collect:

• Personal Identifiable Information (PII) such as national identification numbers, physical addresses, or telephone numbers.

• Private keys, seed phrases, PIN codes, or plaintext passphrases.

• User financial account passwords or third-party banking credentials.

• IP addresses or device telemetry tied to specific wallet addresses.

3. Local Storage & Vault Security

When you create or import an account, the resulting data is encrypted using military-grade AES-GCM-256 with key derivation handled by PBKDF2-SHA256 (600,000 iterations).

The resulting encrypted ciphertext is stored solely in your device's local sandboxed storage (IndexedDB / localStorage). If you clear your browser storage or delete the application without backing up your recovery phrase, your keys cannot be recovered by anyone, including Wallet B+.

4. Blockchain Transparency & Public Ledger Data

When you broadcast a transaction to the Polygon PoS network (Chain ID 137), the transaction payload, sending address, recipient address, timestamp, and token values become part of the immutable public Polygon blockchain ledger.

Public blockchain data is permanent, globally distributed, and outside the custody or control of Wallet B+. You are responsible for maintaining confidentiality of your public addresses.

5. GDPR & Data Subject Rights

Under the European Union General Data Protection Regulation (GDPR) and international privacy frameworks, data subject rights (including the Right to Erasure / Right to be Forgotten) apply to personal data controlled by an enterprise.

Because Wallet B+ does not process or store your personal data on any server, all data erasure is performed directly by you by deleting the local vault in the wallet settings or clearing your browser application cache.