Privacy policy

Applies to the MASKED browser extension and maskedwallet.com. Last updated 11 October 2026.

In short: MASKED is a self-custody wallet. Your recovery phrase and private keys are created and stored only in your browser, encrypted with your password, and are never sent to us or anyone else. We run no analytics, no advertising and no tracking.

What stays on your device

Your recovery phrase, optional passphrase and private keys (encrypted with your password).
Your scan key for Shielded payments. The private check for incoming Shielded payments runs in your browser.
Your coins, token history, settings and the list of sites you connected.

Uninstalling the extension deletes this data. Keep your recovery phrase safe: we cannot recover it.

What the wallet asks servers for

To show balances and send transactions, the wallet talks to public Bitcoin services. Like any website, these servers see your IP address and the request.

Service	What it receives	Why
mempool.space, blockstream.info (or your own server)	Your Public address, block and transaction IDs, transactions you send	Balance, fees, price, broadcasting
ordinals.com	Outputs (coins) of your Public and Shielded balance	Checking coins for inscriptions and runes so they are never spent by mistake
scan.maskedwallet.com (ours)	Block numbers only	Public block data for fast Shielded scanning. It never receives your keys or addresses
tokens.maskedwallet.com (ours)	Your Public address and token tickers	BRC-20 / BRC2.0 balances and supply. It forwards the lookup to UniSat's public API and caches the answer

You can switch our servers off or replace them with your own in Settings.

Websites you connect

A website can only see your Public address after you approve a connection. Every signature, payment or inscription needs your approval in the MASKED popup. Sites never see your Shielded balance or keys.

Our servers

Our servers keep standard web server logs (IP address, time, requested path) for security and abuse prevention; they are deleted automatically after about two weeks. Token balance answers are cached for up to 24 hours. We do not sell or share data.

Token claims (maskedwallet.com)

If you use the claim page, we store your claim: receiving address, amount, payment transaction and status, so tokens can be delivered even if you close the page. This is linked to Bitcoin addresses, not to your name or email.

Contact

Questions, data requests or security reports: maskedbtc@gmail.com.