Privacy Policy

Account information. When you register, we collect your name, email address, and a hashed version of your account password. If you enable two-factor authentication, related security settings are stored on our servers.

Wallet metadata. To link your local wallet to your account and display balances and activity, we store public wallet information you choose to register, such as wallet labels, public addresses, derivation paths, account indexes, public keys, and a master fingerprint. We do not receive or store your recovery phrase, private keys, or wallet password.

Transaction and activity data. When you send, receive, or monitor assets, we process transaction details including amounts, addresses, network identifiers, transaction hashes, statuses, and timestamps. Security and audit logs may record account events such as sign-in attempts and sensitive actions.

Device and browser data. We use cookies and similar technologies for authentication sessions, CSRF protection, and Service functionality. Locally on your device, the app may store theme preferences, cookie consent choices, encrypted wallet data, auto-lock settings, and PWA install preferences.

Technical data. Our servers may receive standard request information such as IP address, browser type, device type, and timestamps when you access the Service.

• Provide, operate, and maintain the wallet and account features you request
• Authenticate users, enforce ownership checks, and protect against abuse
• Display portfolio values, market data, transaction history, and notifications
• Broadcast or monitor blockchain transactions through supported networks
• Improve reliability, security, and user experience
• Respond to support requests and legal obligations

The Service uses essential cookies for secure login and session management. We also use browser local storage for non-custodial wallet encryption, UI preferences, and optional cookie consent choices.

You can clear site data through your browser settings. Clearing local wallet storage may remove access to your encrypted wallet on that device unless you have your recovery phrase backed up.

Blockchain networks. When you send or receive cryptocurrency, transaction data is submitted to public blockchains such as Bitcoin, Ethereum, BSC, and TRON. Public blockchain data is visible to anyone and is not controlled by C&O.

Market data providers. We may retrieve indicative asset prices from third-party sources such as CoinGecko to power portfolio displays on the landing page and dashboard.

Infrastructure. Account, wallet metadata, and transaction records are processed through C&O backend services hosted at api.co369.com.

We do not sell your personal information to third parties.

We retain account and transaction records for as long as your account is active and as needed to provide the Service, meet legal requirements, resolve disputes, and enforce our policies.

You may delete your account from Profile Settings. Account deletion removes your profile from our systems subject to retention required by law or legitimate business needs such as fraud prevention and financial record keeping. Local wallet data on your device remains under your control until you clear it.

We apply technical and organizational measures including password hashing, CSRF protection, encrypted sessions, rate limiting, optional two-factor authentication, and ownership checks on wallet operations. No method of transmission or storage is completely secure, and you are responsible for safeguarding your recovery phrase, wallet password, and account credentials.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. You can update your name and email in Profile Settings, manage two-factor authentication, delete your account, and control cookie consent through the in-app banner.

To exercise privacy rights or ask questions about this policy, contact us using the details below.

The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

Your information may be processed in countries other than your own. By using the Service, you consent to the transfer and processing of information as described in this policy, subject to applicable data protection laws.

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest version. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

For privacy-related questions or requests regarding C&O Wallet, contact us:

• Website: https://co369.com
• Privacy policy URL: https://co369.com/privacy
• +49155677 77369