nSite Wallet Privacy Policy

1. Summary

nSite Wallet is a self-custody 2-of-3 wallet for iPhone, Windows, macOS and Ubuntu, made by nsite.tech ("nSite", "we"). It has no accounts: we never ask for your name, email or phone number, and the apps contain no analytics, advertising or tracking. Your keys, passphrase and backup recovery phrase never leave your devices. The only data we receive is what nSite's co-signing service needs to add its signature - public keys and the transactions you ask it to co-sign.

2. What stays on your device

Your device's key (sealed in the iPhone Secure Enclave, the TPM, or your operating system's keychain), your passphrase and your backup recovery phrase. We cannot see or recover them. On iPhone the wallet's files are unreadable while the phone is locked and are excluded from iCloud backups.

3. What the nSite co-signing service receives

When you create a wallet that uses nSite as its third key, and whenever you send funds, the app contacts our co-signing service (cosign.nsite.tech). It receives and stores:

• a random wallet ID and your device's public authentication key;
• your vault's public keys and addresses (Bitcoin, Base and Solana), and a signature from your backup key that proves the vault is yours - public information, no private keys;
• each transaction you ask it to co-sign: amounts, destination addresses and network fees, with the time, so it can apply your 24-hour spending limits;
• recovery requests made with your backup phrase (public keys only), so your existing device can be warned and cancel a recovery it did not start;
• the IP address of each request, in standard web-server logs.

This information is not linked to your identity by us - we never ask who you are. Note that blockchain transactions are public by nature.

4. How we use it

Only to provide the wallet: to co-sign the transactions you request, to enforce your spending limits and recovery delays, and to keep a security audit log. We do not sell, rent or share it, and we do not use it for advertising or profiling.

5. Blockchain networks and other services the app contacts

To show balances and send transactions, the app connects directly to public blockchain services (for example mempool.space for Bitcoin, Base and Solana network nodes). They receive your public addresses and your IP address, and their own privacy policies apply. Transactions you broadcast are permanently public on their blockchain.

6. Retention and deletion

Co-signing records are kept while your wallet is registered, so that limits and recovery protection keep working; the audit log is rotated and older entries are removed after six months; backups of the registry are kept for 30 days. Deleting the app removes everything stored on your device. To have your wallet's registration deleted from the co-signing service, email us from the app's support link with your wallet's receive address. After that nSite can no longer co-sign for that wallet; your funds remain movable with your device key and your backup phrase (2 of 3).

7. Children

nSite Wallet is not directed to children under 13, and we do not knowingly collect information from them.

8. Changes

We will update this page when what the app sends changes, and change the date above.

9. Contact

Questions about this policy: [email protected].