Tacet Privacy Policy

Effective date: October 10, 2026

On your device

Your recovery phrase, private keys and password stay in your browser, encrypted with your password. We cannot read or recover them.

Sent to our server

To find payments sent to you, Tacet gives api.tacet.money (or a server you choose in Settings) your scan private key. With it the server can see the payments you receive, but it cannot spend your funds: that needs your spend key, which never leaves your device. The scan key is used only while you are connected and is never written to disk or to logs.

The server also gets your normal (bc1p) address and the coins you hold, to show balances and Runes, and the transactions you sign, to broadcast them.

What we keep

Service logs, kept 30 days: a shortened scan key that cannot be turned back into the key, the scan's starting block, and the IDs of broadcast transactions. No IP addresses, no wallet addresses, no accounts, no analytics. To limit abuse, a hash of your keys is held in memory for up to an hour.

Third parties

None. "View in explorer" opens mempool.space only when you click it.

Deleting your data

Settings → Forget this wallet, or uninstalling the extension, deletes everything Tacet stored in your browser. Write down your recovery phrase first.