PhotonBolt Wallet — Privacy Policy
Last updated: 7 October 2026. Applies to the PhotonBolt Wallet browser extension (Chrome) and the PhotonBolt Android wallet.
What stays on your device
- Recovery phrase and keys — encrypted with your password in the extension's local storage. Never transmitted.
- Password — never stored in plain text and never transmitted.
- Settings — selected network, address index, connected websites, theme, error log. Stored locally only.
What is sent over the network, and why
To show balances and move funds, the wallet has to ask Bitcoin and RGB services about your public data. It sends only what each feature needs:
| Service | What it receives | Why |
|---|---|---|
| Bitcoin block explorers (PhotonBolt's own explorer for the test network; mempool.space for public networks) | Your public Bitcoin addresses, signed transactions you choose to send | Read balances and history, estimate fees, broadcast your transactions |
| PhotonBolt RGB service (airdrop.photonbolt.xyz) | Your wallet's public key fingerprint and extended public keys, RGB invoices and transfer data, requests signed by your wallet | Track your RGB token balances, create invoices, prepare transfers for you to sign. It can see your public keys but cannot spend your funds. |
| RGB proxy (dev-proxy.photonbolt.xyz) | RGB transfer data (consignments) between sender and receiver | Deliver token transfers to the person you are paying |
| PhotonBolt Hub (hub.photonbolt.xyz, Internet Computer) | Your hub account id (a public key derived from your wallet), the payments and withdrawals you request | Only if you use the Hub: keep your hub balance and process your payments |
| PhotonBolt faucet and Lightning services (faucet.photonbolt.xyz, pay.photonbolt.xyz) | Your public address or Lightning invoice, requests signed by your wallet | Test-coin faucet, Lightning invoices and payments, merchant pay pages |
| ntfy.sh | A random alert topic you create | Only if you switch on Hub alerts |
These services keep standard server logs (such as IP address and time of request) for security and troubleshooting, for up to 30 days.
Websites you connect to
The extension makes a wallet provider available to web pages so that a site you choose can ask to connect. A site gets your address only after you approve the connection, and every signature or payment needs your approval in the wallet window. The extension does not read, collect or change page content for any other purpose.
What we never do
- We never collect your recovery phrase, private keys or password.
- We do not sell or share personal data, and we do not use it for advertising or credit decisions.
- We do not track your browsing history.
- We do not use analytics or advertising SDKs in the wallet.
Your choices
- Sign out in the wallet to delete all wallet data from the browser. Removing the extension does the same.
- You can disconnect any website from the wallet at any time.
- Using the Hub, the faucet and Lightning features is optional.
Test network
The wallet currently runs on Bitcoin test networks (regtest and public testnets). Test coins have no monetary value.
Children
PhotonBolt Wallet is not directed at children under 13 and we do not knowingly collect their data.
Changes and contact
We will post any change to this policy on this page with a new date. Questions: privacy@photonbolt.xyz.