Effective: May 4, 2026
Summary. Bitleo Wallet is a self-custodial wallet for the Canton Network. Your master password and private keys are generated and stored only on your device, encrypted at rest. We cannot access them and cannot recover them. The wallet runs in two modes: self-hosted (we process nothing) and Bitleo-hosted (we process the minimum data described below).
Removed when you uninstall the extension.
Wallet operations occur directly between your browser and your own systems. Bitleo receives nothing.
If you create a hosted wallet with a referral code, we process:
| Data | Purpose |
|---|---|
| Referral code | Verify invitation |
| Username | Identify your account |
| Public key | Allocate your Canton party |
| Activity events | Operate Bitleo Points |
We do not collect emails, names, addresses, phone numbers, payment data, browsing history, location, or product analytics. You can switch to self-hosted or stop using Bitleo at any time; your keys stay on your device.
We count events tied to your hosted account: account creation, transfer preapproval activation, merging of delegated holdings, and transactions you submit (with a daily cap). We process event count and type only — not recipients, amounts, or contents beyond what's needed to count the event.
Points are tied to your hosted account and are deleted if you delete the account. We do not publish leaderboards or share points data.
If you submit the form, we collect name, company (optional), and email. Submissions are processed by Web3Forms (US) and protected by Google reCAPTCHA. To be removed, email privacy@bitleo.cc.
By protocol design, your Canton party identifier, public key, and the contract state you are party to are visible to other participants on the network. This is a property of Canton, not a Bitleo choice.
| Permission | Purpose |
|---|---|
storage |
Persist encrypted credentials locally |
identity |
OAuth sign-in (self-hosted mode) |
alarms |
Schedule background token refresh |
tabs |
Open OAuth and onboarding flows. We do not read tab content. |
| Host access | Connect to URLs you configure. Granted per origin via Chrome consent prompt. |
Email privacy@bitleo.cc to access, correct, delete, port, or restrict your data, or to withdraw consent. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
Bitleo is not directed at users under 16 and we do not knowingly collect their data.
We will update this page when practices change and update the effective date above.
© 2026 Bitleo. All rights reserved.