Privacy Policy

The short version

ArShield is built so that we cannot see your data even if we wanted to. Encryption and decryption happen in your browser. Files, keys, and message plaintext never reach us.

What we do not collect

• File contents or filenames
• Encryption keys, key files or passphrases
• Wallet signatures
• Message plaintext
• Personal information

Stored in your browser

A few small records live in your browser's local storage and never leave your device: today's count of file encryptions, used for the tier limit; for each wallet address that passed the first-use signing check on this device, a flag saying so; and the wallet connection the wallet library keeps so it can reconnect. No signature and no key is ever stored. Clearing this site's data removes them all.

Analytics

We do not run third-party analytics or advertising trackers, and we set no cookies. Our hosting provider may keep standard, aggregate request logs (IP address, path, timestamp) for security and abuse prevention. Wallet addresses are never part of those logs.

Blockchain reads

Once the $arshield token is live, connecting a wallet makes the app read your token balance via a ARC RPC endpoint to determine your tier. This read is unauthenticated and is identical to querying any block explorer: the RPC endpoint sees the address it is asked about. No wallet address is stored by us. Pages you visit without connecting a wallet or submitting a Seal send nothing to the chain.

Third-party services

Our site is served by Vercel. See Vercel's Privacy Policy.

Changes

We may update this policy.

Contact

Questions about privacy, or a security report: hello@arc-shield.xyz