1. About this policy
This Privacy Policy describes how Nora Wallet ("Nora Wallet," "we," "us," or "our") handles information when you visit our website, install or use the Nora Wallet browser extension, contact us, or use related services.
Nora Wallet is a self-custodial wallet. You are responsible for safeguarding your password, recovery phrase, and private keys. We cannot recover them for you.
2. Information stored on your device
The extension stores wallet vaults, preferences, imported asset references, custom networks, connected-site permissions, and local transaction activity in browser storage. Wallet credentials are encrypted before being stored. The extension may temporarily hold decrypted material in memory while unlocked so it can perform actions you request.
The landing website does not need and must never request your recovery phrase or private key.
3. Information you provide
We may receive information you voluntarily submit, such as your email address, support messages, security reports, and any diagnostic information you choose to include. Never include wallet secrets in a support request.
4. Network and blockchain information
To show balances, token metadata, NFT metadata, gas estimates, transaction status, and blockchain state, Nora Wallet sends necessary RPC requests to configured network providers. These requests may contain wallet addresses, contract addresses, transaction hashes, chain identifiers, and request data. Providers may also receive technical information such as your IP address.
Public blockchain activity is inherently public and may be permanently visible, including addresses, transaction values, contract calls, and token transfers.
5. Swap, portfolio, and cross-chain providers
When you request a token portfolio, price, or executable route, Nora Wallet or its backend service may send the selected network, wallet or token addresses, amounts, taker address, slippage, and other routing parameters to providers such as Alchemy and 0x. We do not send your recovery phrase, private key, or vault password to those providers. Provider terms and privacy practices apply independently.
6. Website and service data
The Swap API assigns a random installation identifier stored by the extension and sends it with API requests to apply per-client rate limits. It is not derived from your wallet address or secret keys. Our hosting and security providers may automatically process limited log data, such as IP address, browser type, timestamps, requested URLs, response status, and diagnostic events. If analytics or error-reporting tools are introduced, this policy and any required consent mechanism will be updated before collection begins.
7. Browser permissions
The extension uses browser permissions only to provide wallet functions. Storage preserves encrypted vault and settings data; idle and alarm capabilities support locking and background monitoring; clipboard access is used following an explicit copy action; page access enables EIP-1193 provider injection and dApp communication. Permission usage may change with product updates and will be reflected in extension release information.
8. How we use information
- Provide, maintain, and secure Nora Wallet.
- Respond to requests and support messages.
- Detect abuse, fraud, failures, and security threats.
- Comply with applicable legal obligations.
- Improve reliability using aggregated or minimized diagnostics where enabled.
9. Sharing, service providers, and limited use
We may use hosting, RPC, portfolio, swap, cross-chain, security, and support providers only as needed to deliver requested functionality, maintain security, comply with law, or support a business transfer subject to appropriate safeguards. We do not sell personal or sensitive user data, use it for personalized advertising, or allow human access except with specific user consent, for security, when required by law, or after aggregation and anonymization for internal operations.
Information obtained through Chrome extension permissions is used only to provide or improve Nora Wallet's single-purpose, user-facing wallet functionality. Our use and transfer of that information complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
10. Retention and security
We retain information only for as long as reasonably necessary for the purposes described here or as required by law. Locally stored extension data remains on the device until removed by the user, browser, or extension workflow. No method of storage or transmission is guaranteed to be completely secure.
11. Your choices and rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to certain processing. You can revoke connected sites, remove custom assets or networks, lock the wallet, delete wallet vaults after verification, or uninstall the extension. Blockchain data generally cannot be changed or deleted by us.
12. Children
Nora Wallet is not directed to children or anyone who cannot legally agree to these terms in their jurisdiction. We do not knowingly solicit personal information from children.
13. International transfers
Service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.
14. Changes
We may update this policy as the product or law changes. The date above identifies the latest revision. Material changes may be communicated through the website or extension.
15. Contact
Privacy questions may be sent to privacy@norawallet.io. Replace this address and add the operator's legal name and registered address before publication.