Privacy policy

1. What we collect

We collect only what we need to run your account and keep your vault monitored:

• Account details. Your email address, an optional name and profile photo, and when you created and last used your account.
• Wallet and vault information. The public addresses of the wallets you link and of your vault's keys, your vault's public on-chain configuration, pending withdrawals and the signatures you provide to co-sign. This information is public on the blockchain.
• Alert settings. Where you ask us to send alerts, such as an email address, a Telegram chat or a webhook address. These destinations are stored encrypted.
• Support messages. What you write to our support team.
• Security records. Your IP address and browser and device details for sign-ins and sessions, and an audit log of sensitive actions, so you can review activity on your account and we can protect it.

2. What we never collect

FORTCORE never asks for, sees or stores your private keys, seed phrase or wallet passwords. The messages and transactions your wallet signs either prove that you own an address or authorize something you chose to do. They never give FORTCORE control of your funds.

3. How we use your information

• To provide and secure FORTCORE: sign you in, show your vault, coordinate signatures and monitor your vault.
• To send the sign-in codes and alerts you ask for, and to reply to support requests.
• To detect and prevent abuse, fraud and security incidents.
• To understand how people find and use our website, using the analytics described below.
• To meet legal obligations.

4. Analytics and cookies

Our public website pages and the sign-up page use Google Analytics, a service of Google LLC, to count visits and understand which pages and campaigns bring people to FORTCORE. Google receives information such as the pages you view, your browser and device type, your approximate location and the site or campaign that referred you, and sets cookies in your browser to recognize repeat visits. We also record events such as clicks on our sign-up buttons and whether sign-up was completed.

We do not load Google Analytics in your account, your vault space or the admin console, where you connect wallets and sign messages.

When you sign in, we set an essential session cookie that keeps you signed in. The service doesn't work without it.

You can block analytics with your browser's settings or an extension, or use Google's opt-out add-on. FORTCORE works the same either way.

5. Who we share information with

We do not sell your personal information. We use service providers who process data on our behalf to run FORTCORE:

• Google Cloud, for hosting, our database and file storage.
• Cloudflare, for network delivery and security.
• An email delivery provider, to send sign-in codes and alerts.
• Telegram, if you choose Telegram alerts.
• Blockchain network (RPC) providers, which your browser and our servers use to read from and send transactions to blockchains.
• Google Analytics, as described above.

We may also disclose information when the law requires it or to protect the rights and safety of our users and service.

6. How long we keep it

We keep account information while your account is active and for as long as needed for security, dispute resolution and legal reasons. You can ask us to delete your account data from the Support section of your account. Information already published on a public blockchain is permanent and can't be erased by us or anyone else.

7. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal information, and to object to some uses. To exercise a right, write to us from the Support section of your account. You can sign out any device and review recent activity from your account at any time.

8. Security

We protect data in transit with HTTPS, store alert destinations encrypted and limit who can access production systems. No system is perfectly secure, so we also design FORTCORE so that a breach of our systems can't move your funds: we never hold your keys.

9. Children

FORTCORE is not intended for anyone under 18, and we do not knowingly collect information from children.

10. Changes to this policy

We may update this policy as FORTCORE changes. We will change the date above and, for significant changes, tell members by email or in their account.

11. Contact

For any privacy question or request, open a request from the Support section of your FORTCORE account.