Privacy Policy

This Privacy Policy explains how LaWallet handles information in connection with the LaWallet websites and services, including lawallet.io, beta.lawallet.io, and the LaWallet gateway API (together, the “Services”). LaWallet is an open-source, non-custodial project, and we aim to collect as little personal data as possible.

1. We never hold your keys or funds

LaWallet is non-custodial. We do not collect, store, or have access to your private keys, recovery phrases, or funds. Bitcoin Lightning payments settle directly between the payer and the recipient's wallet.

2. Information we collect

• Waitlist sign-ups. If you join our waitlist, we collect the contact you provide — an email address, a Nostr public key (npub), or a NIP-05 identifier — so we can notify you about LaWallet. This is processed through Tally (form handling) and Resend (welcome email).
• Technical data. Like most websites, our hosting provider records standard server logs (such as IP address, browser type, and timestamps) for security, reliability, and abuse prevention.
• Analytics. We use Google Tag Manager and Google Analytics to understand aggregate, anonymized usage of our website.
• Public network data. Lightning and Nostr are public protocols. Data such as Lightning Addresses, invoices, and Nostr events is inherently public and is not private information held by us.

3. How we use information

• To operate, maintain, and improve the Services.
• To respond to waitlist sign-ups and send you the information you requested.
• To protect the security and integrity of the Services.

4. Third-party services

We rely on the following third parties, each of which processes data under its own privacy policy:

• Vercel — website hosting and logs.
• Google — Tag Manager and Analytics.
• Tally — waitlist form submissions.
• Resend — transactional email.
• Yadio — Bitcoin exchange-rate data used by some integrations (only a currency code is sent; no personal data).
• The Bitcoin Lightning Network and Nostr relays, which are operated independently by third parties.

5. Cookies

Our analytics tools may set cookies or similar technologies. You can block or delete cookies through your browser settings; doing so will not prevent you from using the core Services.

6. Data retention

We retain waitlist contact information until you ask us to delete it or until it is no longer needed for its purpose. Server logs and analytics data are retained for a limited period in line with our providers' defaults.

7. Your choices

You can ask us to access or delete the waitlist contact information you provided by contacting us through the channels below. Because LaWallet is non-custodial, we cannot access or alter any on-chain, Lightning, or Nostr data, which lives on public networks outside our control.

8. Children

The Services are not directed to children, and we do not knowingly collect data from them.

9. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above.

10. Contact

For privacy questions or requests, reach us via github.com/lawalletio or @lawalletok on X.