Kaspa Safe
Privacy Policy
Applies to the kaspaforge.org website, the installable PWA and the Kaspa Safe Android app. Effective: July 10, 2026. Operator: OfficeForge (contact: kaspa@officeforge.co).
The short version
Kaspa Safe is non-custodial and account-less. Private keys are generated and used only on your device and are never transmitted anywhere. There is no sign-up, no email requirement, no advertising, no third-party analytics SDKs in the app. The server only ever sees the public parameters needed to watch your vault on the public Kaspa blockchain.
What the app stores on your device
Vault parameters and keys live in your browser's / app's encrypted master profile. “Remove this vault from my Desk” writes an encrypted tombstone, so Forge Sync also removes it from your other devices instead of letting a stale copy bring it back. An explicit key-file import can restore it with a newer version. The server never receives the plaintext profile or private keys.
What our server receives
If you register a vault for monitoring: the vault's public parameters (address, public keys, delay settings), a random service token, and — if you connect alerts — your Telegram chat ID. If you choose to set an heir email, we store that address for one purpose only: to notify the heir when the inheritance window opens; you can change or erase it in the vault panel at any time. On withdrawals the destination public key is stored so the panel can show an active withdrawal on any device. Standard web-server logs (IP address, request path, user agent) are kept briefly for abuse protection and are not used for profiling. All balances and transactions are public data on the Kaspa blockchain by design.
What we never collect
Private keys, seed phrases or recovery sheets (we will never ask for them); names or documents (there are no accounts — the only email we ever store is the optional heir contact you set yourself); contacts, location, files or any other device data; advertising identifiers. The Android app requests no permissions beyond network access.
Third parties
Website fonts are loaded from Google Fonts (your IP is visible to Google when the site loads them; the Android app works without them). The website chat widget is protected by Cloudflare Turnstile (Cloudflare processes the challenge). Telegram delivers alert messages if you opt in. Optional swaps are performed by SimpleSwap (see the next section). The Kaspa network itself is public infrastructure. We do not sell or share data with anyone else.
Swaps (SimpleSwap)
The optional "Don't have KAS?" swap widget is powered by SimpleSwap — an independent third-party exchange service that we do not operate. If you use it, the exchange itself is carried out by SimpleSwap under its own terms of service and privacy policy; while a swap is in progress your funds are in SimpleSwap's custody, until KAS arrives at your funding address. Our server only relays your swap request to SimpleSwap's API (chosen currency, amounts, your refund address and the destination KAS address) and keeps a minimal technical record (swap ID, currency, amounts, status) so the page can show the swap's progress — we do not store your refund address. All questions about a swap — delays, refunds, stuck exchanges — are handled by SimpleSwap directly: contact their support at simpleswap.io, quoting your swap ID (shown in the widget).
Retention & deletion
Monitoring records exist so your vault can be watched; to remove a vault from monitoring and delete its record (including the Telegram link), write to kaspa@officeforge.co from any address, naming the vault address. On-chain data cannot be deleted by anyone — that is the nature of a blockchain.
Changes
Updates to this policy are published on this page with a new effective date.