Overview

W2QR performs all cryptographic operations entirely in your browser. Your seed phrase, password, and private keys are never sent to any server. In Advanced mode, the W2QR server stores only encrypted material that cannot be used to access your wallet without your password.

Data that stays on your device

• Your seed phrase (exists in browser memory only during derivation — never stored)
• Your password (used only for key derivation — never stored or transmitted)
• Encrypted QR payloads (generated and decoded locally)
• Derived signing keys (held in browser memory or wallet extension, session-scoped)

Data we never receive

• Your seed phrase or any derivative private keys
• Your password
• Your Recovery Code (no longer generated for new wallets)
• Your Ethereum addresses or transaction data
• Any analytics on cryptographic operations or signing sessions
• Browser fingerprints or device identifiers

Data stored on the W2QR server (Advanced mode only)

When you use Google Drive backup, the following encrypted data may be stored on the W2QR server:

• Encrypted QR backup — your encrypted payload, retrievable via Google sign-in
• A hashed Google subject ID — used to link your records, not your Google email or name
• A random wallet identifier (w2qrId) — never your wallet address

This data is encrypted and cannot be decrypted by the server. Without your password, the stored data is useless.

W2QR Cards produce wallets through honey encryption. The server cannot determine which wallet a card will produce — every password yields a valid mnemonic.

Google sign-in

When you sign in with Google for Drive backup, W2QR receives your Google subject ID (a unique identifier) to link your encrypted records. W2QR does not access your Google contacts, browsing history, or any other Google data beyond Drive file storage. The OAuth scope is limited to profile identification and Drive file access.

Wallet extensions

The W2QR Remote Signer extension and the W2QR Connect Snap (for MetaMask) run locally in your browser. They store imported account data in the extension's or MetaMask's encrypted state. Neither makes external network requests. Signing sessions are time-limited and expire automatically.

Third-party services

The application is hosted on Vercel, which may log standard HTTP access data (IP address, user agent, request timestamp) as part of normal CDN operation. The Find Non-zero Balances feature sends your public address (not private keys) to the Ankr API on the server side for balance lookups. No third-party analytics, tracking, advertising, or telemetry scripts are included in the application.

Cookies and local storage

W2QR does not use tracking cookies. Local storage is used only for user preferences (theme, display settings) and optionally for wallet history (names and receive QR codes of previously opened wallets) — all controlled by toggles in Settings. Authentication sessions (NextAuth) use secure, HTTP-only cookies.

Rate limiting

API routes that access encrypted data use per-user, per-wallet, and per-IP rate limiting. IP addresses used for rate limiting are processed in memory and not stored persistently.

Data deletion

You can delete your data from the W2QR server at any time. Deletion permanently removes all server-stored data associated with your w2qrId, including encrypted backups and the Google subject hash. After deletion, Google Drive restore is no longer available — only your QR code and password remain. Deletion cannot be undone.

Changes to this policy

If this privacy policy changes, the updated version will be posted on this page with a revised date.

Contact

For questions about this privacy policy, contact alex@vir-tec.net.