Welcome to the Freighter

The Freighter Services, or Services, include the Freighter browser extension, mobile application, website, and related user interfaces that enable you to create and manage a Freighter Wallet. Your Freighter Wallet is an access-controlled instance of the Services that allows you to generate and control cryptographic keys for an underlying Stellar Account. You control your crypto—we don't hold your keys. Your privacy comes first.

This Privacy Policy explains how we handle your information (or more importantly, how we don't).

Scope of This Policy

This Privacy Policy applies when you:

• Use the Freighter Services — a user interface

• Visit our website at https://www.freighter.app/

• Use any services that link to this Privacy Policy

• Contact our team or engage with us on social media

Your Consent

By using the Services provided by Stellar Development Foundation (SDF), you agree to these privacy practices.

If You Don't Agree

If these terms don't work for you, please don't use the Services.

1. Content

   
   

• The Basics

• The Stellar Network

• What Information We Don’t Collect

• The Information We Do Collect

• Analytics, Security and Third-Party Services

• When We Share Information

• International Transfer(s)

• Your Privacy Rights

• Security

• Policy Update(s)

• Contact Us
  
  

2. The Basics - What You Should Know

You're in control. The Services provide a non-custodial wallet, which means:

• You control your assets - we don't hold or have access to your crypto

• We don't actively collect your information like name, email address, phone number, etc.

• Your seed phrase stays with you - we never see it

• Your private key is stored only on your device
  
  

Blockchain transparency. While we prioritize your privacy, blockchain technology is inherently transparent:

• Your Stellar Account address on the Stellar Network, transaction history, balances, and other on-chain activities may be visible on public blockchains

• This information cannot be hidden, changed, or deleted - it’s immutable

• Your transaction patterns might reveal information about your activities

• This information could potentially be connected to your real identity by others

Be mindful of transaction patterns that might identify you.

3. The Stellar Network

The Services allow you to generate, authorize, submit and broadcast transactions on the "Stellar Network," a distributed ledger network powered by an open-source protocol found at: https://github.com/stellar/. This Privacy Policy does not apply to any information stored on the Stellar Network.

Important to understand - When you use the Stellar Network:

• Information transmitted to the Stellar Network is public and permanent

• This includes transaction details like public addresses and/or the public key information of the receiver, currency sent or exchanged, time and date of the transaction, amounts and any other data you may choose to include

• This information cannot be hidden, amended, or deleted

• Your transactions may reveal information about you and those you transact with. Such information can potentially be correlated with you and others now, or in the future, by any party who chooses to do so, including law enforcement

4. Information We Don't Collect

Unlike many other services, applications or custodial wallets, the Services are designed with privacy in mind and do not collect:

• Private key(s)

• Names 

• Email addresses

• Phone numbers

• Seed phrases

• Password(s)

• Profile photos

• Date of birth

• Official ID documents (passport, driver’s license, etc.)

Exception: We may collect some limited information such as name, email address or phone number only when you voluntarily share it with our support team for assistance purposes.

The Services may add or enable extra features like fiat onramps or cloud backup in the future. If we do, you will always be notified and given a choice before any additional data is collected. If a feature involves a third-party provider, their privacy practices will apply.

5. Information We Collect and How it is Used

5.1 Device and Usage Information

• Device & Usage Information: We and our service providers may collect limited data to provide and protect our services, including your device details (model, operating system, identifiers), browsing activity (pages viewed, links clicked, referring sites, wallet connections), IP address, and error reports. We only use your IP address for security purposes, analytics, establishing connections, approximate location detection, and legal compliance—not for marketing or advertising purposes. This device & usage information data helps us optimize performance, prevent attacks, troubleshoot issues, and improve our services through analytics. We retain this information only as long as necessary for these purposes and to meet legal obligations. You can opt out of non-essential data analytics collection by toggling this feature off in Preferences, though some basic data collection remains necessary for the Services to function properly.

• Public Key / Addresses : We may collect the public key that is generated when you create your Freighter account. We may also collect other public blockchain addresses associated with your public key. We do not use these keys or addresses for tracking purposes.

• Crash Reports: We collect crash reports and error logs to help identify and fix bugs

• On-Chain Transactional Information: When you submit transactions on the Stellar Network using the Services, we may collect information about those transactions (sender, recipient, asset type, amount, timestamp, and date) for support and analytics purposes.

5.2 Biometric Data - For Authentication Only

We may use biometric data (such as fingerprints or facial recognition) in future versions of the app to authenticate your identity and unlock your wallet interface.

Important privacy protections:

• Biometric data is stored locally on your device and managed by your device's operating system

• The Services do not access, receive, or process your actual biometric information; authentication is handled entirely by your device’s biometric API

• By using biometric authentication features, you consent to the use of your biometric data as described here. You may withdraw consent at any time by disabling this feature in your device settings. Disabling biometric authentication will not affect your ability to use other features of the Services

• Our practices are designed to comply with applicable biometric privacy laws, such as the Illinois Biometric Information Privacy Act (BIPA)
  
  

6. Analytics, Security and Third-Party Services

6.1 Analytics

The Services collect limited usage information about how you use our Services, either directly or through trusted Third-Party Services. This data helps us improve the app's performance and features. This information will not be connected to any personal identity and we may keep it for as long as needed. You can stop this anonymous data collection at any time by toggling off the 'Anonymous Data Sharing' option in Preferences.

6.2 Crash Reporting

We use Third-Party Services to collect crash reports and error logs for bug identification and resolution. This data is stored for 30-90 days.

6.3 Third-Party Integrations

The Services integrate with some of the following Third-Party Services:

• Blockaid: For security purposes

• Stellar.expert: For blockchain data

• Coinbase: For on-ramping

When you use these integrations:

• Your public key may be shared with applications you connect with

• Your public key may be shared with Third-Party Services so it can send assets to it

• All data transfers use HTTPS for security

6.4 Understanding Ramps

The Services may allow you to interact with specialized Third-Party Services on the Stellar Network called "Ramps" that provide conversion between fiat currencies and digital assets. Ramps provide "on-ramp" functionality (converting fiat money to digital assets) and "off-ramp" functionality (converting digital assets back to fiat money).

These Ramps operate as independent Third-Party Services. SDF does not provide these services. Your use of any Ramp is governed by that Ramp's respective terms and conditions and privacy policy, not ours. SDF makes no representations, warranties, or endorsements about any Ramp's services.

When you use features powered by our partners, Third-Party Services or Ramps, they may need or collect some of your personal information to provide their services to you.

7. When We Share Information

We share limited information in the following circumstances or as otherwise described in this policy:

• Stellar Network: In connection with your use of the Services, we share information with the Stellar Network, including publicly and permanently, as described in The Stellar Network section above.

• Third-Party Services: We share information with Third-Party Service providers, vendors, consultants, or organizations that need access to your information to provide services you request through the application (such as Ramps, analytics, fraud prevention, aid organizations or customer support). These providers may have their own privacy practices, which you are responsible for reviewing separately.

• Legal Requirements: We may use or disclose your information to detect, prevent, or address fraud or if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.

• Protection of Rights: We may use or share information if we believe that your actions are inconsistent with our Terms of Service, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of SDF, our users, the public, or others.

• Professional Advisors: We share information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.

• Business Transfers: We may share information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

• With Your Consent: We share information with your consent or at your direction.

• Aggregated Data: We also share aggregated or de-identified information that cannot reasonably be used to identify you.
  
  

8. Transfer Of Information To The United States & Other Countries

We are headquartered in the United States and we have operations and service providers and third-party partners in the United States and other countries. Therefore, we and our service providers and third-party partners may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. Where required by law, we provide adequate protection for the transfer of personal data in accordance with applicable law, such as by obtaining your consent, relying on the European Commission's adequacy decisions, or executing Standard Contractual Clauses. Where relevant, you may request a copy of these Standard Contractual Clauses by contacting us at help@freighter.app.

9. Your Privacy Rights

You maintain complete control over your information.

Your rights include:

• Opt-out of data collection: You can opt-out of certain sharing in-app events

• Data deletion: You can remove device data by logging out of the app

Note that data collected is anonymous and cannot be tracked to a specific user.

9.1 Cookies

Our website uses small text files called cookies to help the site work better for you. Here's what you need to know:

What cookies do for you:

• Essential cookies: These help our website function properly and remember if you've visited before.

• Analytics cookies: These help us understand how visitors use our site so we can make improvements.

Our cookies: We primarily use Google Analytics cookies to count visitors and see how people navigate our site.

Your control: Most browsers accept cookies automatically, but you can change your browser settings to remove or block them. Keep in mind that some parts of our website might not work properly without cookies.

Want more details? For specific information about our Google Analytics cookies, please contact us at help@freighter.app.

‍

9.2 Mobile Push Notifications

‍We may send push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.

10. Security

We implement appropriate technical and organizational measures to protect the limited information we process.

Security measures for your wallet:

• Private key is stored only on your device

• Private key and seed phrases are securely stored using encryption

However, no system is 100% secure, so we encourage you to:

• Keep your device secure

• Never share your seed phrase

• Be cautious about connecting to Third-Party Services

• Report any security concerns immediately
  
  

11. Changes to This Policy

We may update this policy occasionally. When we do, we'll change the date at the top of this page. For significant changes, we may notify you through our website or app. We recommend checking this policy periodically to stay informed.

12. How to Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: help@freighter.app

• Website: www.freighter.app