Privacy

What each server learns when you use AirWallet, what AirWallet Online sends, and how to share less.

AirWallet has no accounts, no analytics and no tracking code, and the apps never contact airwallet.tech. To show balances and send payments, the everyday wallet still has to ask public servers about your addresses. This page says who sees what, and how to share less. The offline signer talks to no one, so everything here is about the everyday device.

#What a server sees

When the everyday wallet asks a server about a wallet, the server sees:

• your IP address, unless you use a proxy
• the addresses it is asked about, together, so it can guess they belong to one person
• the transactions you send

Servers never see your keys or your recovery phrase.

#Which servers AirWallet asks

You can replace each default with your own server in Settings. Your own node is the private choice.

Bitcoin servers cannot be asked about many addresses at once. AirWallet asks about each of your Bitcoin addresses in turn, so the server sees all of them.

An explorer API key identifies you to the explorer that issued it. AirWallet uses it only for the networks the free explorers could not answer, so the key's owner sees as few of your addresses as possible.

#Monero and Zcash keep your payments from the server

Monero and Zcash wallets download blocks and find their own payments on your device. The server never learns which payments are yours.

A Monero node sees your IP address and the transactions you send. By default, AirWallet tells the node where each wallet left off, so it downloads only new blocks. Settings → Monero node → Private sync stops that, at the cost of downloading up to a day of blocks again each time a wallet opens. The public Monero nodes use plain http://, so someone watching your network sees what the node sees. Use Tor or your own node if that matters to you.

A Zcash server sees your IP address, the transparent (t1…) addresses it is asked about, and the transactions you send. It never sees which shielded payments are yours.

#Prices

Prices come from CoinGecko, with Kraken's public prices as a backup. The everyday device always asks for the main coins' prices: Bitcoin, Ethereum, Solana, Monero and Zcash. That request is the same for everyone, so it says nothing about what you hold.

Token prices would show which tokens you hold, so AirWallet asks for them only when Show dollar values is on. Solana token prices come from Jupiter.

#Hide your IP address with Tor

On the desktop apps and Android, open Settings → Proxy (Tor):

1. Start Tor. It is not built into AirWallet. On a computer, open Tor Browser or run the Tor service. On a phone, use Orbot.
2. Select Find Tor. AirWallet keeps the proxy only if Tor's own check confirms the request came out of Tor.
3. To use another proxy, type it in SOCKS5 proxy, for example socks5://127.0.0.1:9050.

Every request then goes through the proxy: balances, prices, sends and Monero. Servers see a Tor exit instead of your IP address. Requests are slower, and some servers refuse Tor. While a proxy is set, nothing goes out without it: if Tor is closed, there is no connection at all.

The Chrome extension has no proxy setting of its own. Its requests are Chrome's, so Chrome's proxy settings apply.

To see where requests go right now, open Settings → This phone: everyday wallet… (or This computer). The page checks each network and says whether a proxy is in use.

#View keys

Anyone can look up a Bitcoin, Ethereum or Solana address's balance. Monero and Zcash payments are private, so the everyday device needs a view key to show them:

• Monero's private view key shows every payment that arrives, with amounts. It cannot spend, and it cannot tell what was spent until the offline device sends back its coins' key images.
• Zcash's viewing key (uview1…) shows everything the wallet receives and sends, with amounts and memos. It cannot spend.

Show to my online wallet on the offline device puts these keys in the watch code, and the screen says so. A leaked view key costs privacy, never coins. AirWallet Online warns you before it keeps one ("This code has a view key"), and lets you watch without it.

Treat watch codes as private anyway. Even without view keys, a watch code lists every address the wallet uses.

#Receive without linking payments

Give each payer a fresh address, and they cannot see your other payments:

• Bitcoin: Receive shows an unused address, and New address gives another
• Monero: Receive shows a subaddress, and once one has received money the everyday wallet does not offer it again
• Zcash: New address gives another shielded address that nobody can link to the others

#AirWallet Online

AirWallet Online never holds a key and sends nothing to airwallet.tech. It asks each coin's public servers directly, with no cookies and no referrer. What it keeps (addresses, names, last balances) stays in your browser. With Remember my wallets on this browser off, it lasts only for the tab. See AirWallet Online for its server list.

#On your screen

Tap a balance to hide every amount, and tap again to show them.

Payment notifications (Settings → Notify me of payments) say "Payment received", the amount and the wallet's name. While amounts are hidden, the notification leaves the amount out. The offline device never shows notifications. On Android, a notification's contents are hidden on a locked screen, and there are none while the app is disguised. On a computer, your system's settings decide what shows on the lock screen.

#Reporting a problem

Help → Report a problem writes an email to support@airwallet.tech in your own email app. By default it adds the app's version, the device and its last messages, with anything that looks like an address, a key or an amount cut out. You see what is added before you send, and you can turn it off. On the offline device, the report is text to copy, or a QR code for another phone's camera.