Privacy Policy

Last updated: September 29, 2026

1. This website (1wallet.uno)

The website has no analytics, no error reporting and no advertising or tracking cookies.

• Fonts: pages load their fonts from Google Fonts, so Google receives your IP address and browser details when a page opens.
• Server logs: our hosting provider keeps standard logs of the requests our servers receive, including your IP address and browser.
• The OWT presale: the presale section reads the presale contract through a public Ethereum node (publicnode.com) or through your own wallet. A purchase is recorded on the Ethereum blockchain, where anyone can see it.
• Your browser: the site remembers, in your own browser, that you accepted the presale terms and any email you entered in the form below. This stays in your browser.

2. If you give us your email

The site has an optional email form. If you submit it, we store:

• The email address you entered, and which form you used
• The date and time you submitted it
• Your IP address, and which browser and device you used

We use this only to contact you about what you signed up for. We do not sell it, and we do not share it with third parties. To have your entry deleted, email hello@1wallet.uno and we will remove it.

3. The OneWallet apps

This covers the iPhone and Android apps, the web app at app.1wallet.uno and the browser extension. They have no account, no sign-up, no analytics, no crash reporting and no advertising.

To show your balances and move your funds, the apps have to talk to other services. This is what they receive:

• Blockchain networks: your public wallet addresses, and the transactions you approve, go to the companies that run each network's nodes and indexers. When you log in with a recovery phrase, the app also checks the first few accounts that phrase controls, to bring back the ones you have used.
• Prices and search: our server at 1wallet.uno, CoinGecko and DefiLlama receive which coins or token contracts to price, and what you search for in Discover.
• Transaction history: our server asks the network's explorer (for example Etherscan) for your address's history and passes it back to you.
• Swaps and bridges: LI.FI receives your wallet address, the tokens and the amount, so it can quote and build the transaction, and a bridge's transaction ID, so the app can tell you when it has arrived. On other networks, the exchange that makes the swap (for example Jupiter on Solana or STON.fi on TON) receives the same. Limit orders in the browser extension go to CoW Protocol.
• NFTs: Alchemy receives your wallet address to list your NFTs.
• Perps and Predict: when you open them, a location service (ipapi.co, ipwho.is or ipinfo.io) receives your IP address so the app can check which country you are in, and Hyperliquid or Polymarket receives your wallet address to show your positions. Trading happens on their own sites, under their own policies.
• WalletConnect: when you connect to an app, WalletConnect (run by Reown) carries the encrypted connection, and the app you approve receives your wallet address. WalletConnect's servers also receive a random ID for your installation and which browser or device you use.
• Buying and selling crypto: if you pick a provider, its checkout opens with your wallet address, the amount and the currency, and that provider's privacy policy applies.
• Scam warnings: the apps download a public list of known scam sites from GitHub. Nothing about you is sent with it.
• QR codes on Android: scanning uses Google ML Kit, which sends Google information about your device, the app and how the scanner performed.

Each of these services also sees your IP address, as any website you visit does, and its own privacy policy applies to what it keeps.

4. What reaches our own servers

Only the price and transaction history requests described above. Our hosting provider's standard logs record them, including your IP address and, for history, the wallet address asked about. To stop abuse, our servers also count requests for one minute, using a one-way hash of your IP address rather than the address itself. We do not sell or share any of it.

5. What stays on your device

• iPhone and Android: your recovery phrase is encrypted with a key made from your PIN and kept in your phone's secure storage. Your PIN is not stored; the app keeps only a one-way check value to recognise it.
• Web app: your wallet is encrypted with AES-256-GCM under a key made from your password, and wrapped again with a key your browser holds and cannot export. It stays in that browser, and clearing the site's data removes it.
• Browser extension: your wallet is encrypted with AES-256-GCM under a key made from your password, in the extension's own storage.
• Everything else: your settings, token list, address book, price alerts and recent balances and prices stay on your device.

If you lose your device, remove the app or the extension, or clear the web app's data without a copy of your recovery phrase, the wallet cannot be recovered. We cannot recover it for you.

6. Cookies

The website and the web app set no cookies. They keep a few settings in your browser's own storage, which is not sent to us.

7. Children

OneWallet is not intended for users under 18 years of age. We do not knowingly collect data from minors.

8. Changes

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

Privacy questions? Contact us at hello@1wallet.uno.