Privacy
Privacy Policy
Last updated 30 August 2026
Cobalt Wallet is a self-custody XRP Ledger wallet. We do not operate accounts, and we cannot see your keys, your recovery phrase or your passcode.
What stays on your device
Your recovery phrase, derived keys, optional 25th word and encrypted vault are created and stored only in your browser's local storage on this device. They are encrypted with AES-256-GCM using a key derived from your passcode or your device passkey.
We have no server that receives, backs up or escrows this material. If you clear site data or lose the device without your recovery phrase, no one — including us — can restore it.
What leaves your device
To show balances and submit transactions, the app connects directly to public XRP Ledger nodes. Those nodes receive your XRPL address and signed transactions, as with any wallet.
Market, ETF and token data is fetched from public third-party providers. Those providers may log the IP address of your request under their own policies. No wallet address is sent to them.
Signing always happens locally. Private keys are never transmitted.
What we do not do
No accounts, no email collection, no advertising identifiers, no selling of data, and no profile building. We do not add analytics that link activity to your XRPL address.
Public ledger transparency
The XRP Ledger is a public blockchain. Addresses, balances, trustlines and transactions — including the service fee payment disclosed in the app — are permanently visible to anyone. Privacy on-chain is your responsibility.
Your controls
You can remove all local data at any time by deleting the wallet in Settings or clearing site data in your browser. This is irreversible without your recovery phrase.
Changes and contact
Material changes to this policy will be reflected on this page with a new update date. For privacy questions, contact the operator of this deployment.
