Legal

Privacy Policy

Last updated October 23, 2026 (draft)

Draft pending legal review

This text is a plain-English draft written while UMBR runs on testnets. It has not been reviewed by a lawyer and may change before UMBR handles real money. Questions: @umbrtrade on X.

This policy explains what information UMBR handles when you use umbr.trade, the app, the documentation and the SDK. It is written to be read, not skimmed past.

1. The short version

UMBR is built so that we do not need your personal information to work. We have no accounts, no analytics and no advertising. Your keys and private notes stay on your device. The small amount of information we do handle is described below.

2. What we never receive

By design, we never receive:

your wallet's private keys or seed phrase;
the secrets that open your private notes, or the notes themselves;
your private balance, or the amounts and counterparties of your private payments.

We cannot hand over what we never had, to anyone.

3. What is public on-chain

UMBR runs on public blockchains, which anyone can read. Some things are public whether or not you use UMBR, and neither we nor anyone else can remove them:

shielding shows the depositing address, the asset and the amount;
unshielding shows the receiving address, the asset and the amount;
every private action shows that the pool was called, when, and the commitments and spent markers the proof publishes, which do not reveal amounts or owners.

Read the privacy model for the full picture, including how timing and matching amounts can weaken privacy.

4. What stays on your device

The app keeps a few small settings in your browser's storage, such as your theme and selected network. The Cookie Policy lists every key. This data stays on your device; we do not collect it.

5. Website and hosting logs

Like any website, ours is served by a hosting provider that receives standard request data: IP address, browser user agent, the page requested and the time. This is used to deliver the site, keep it secure and investigate abuse. We do not add analytics, tracking pixels or third-party advertising scripts.

6. The relayer

If you choose to send a private transaction through a relayer, the relayer receives the finished transaction: the proof, its public inputs, the fee, and encrypted data it cannot read. For an unshield it also sees the public recipient and amount, which become public on-chain anyway. Like any server, it sees the network address the request came from and when.

For a relayer we operate, we intend to keep request logs to the minimum needed to run and protect the service and to delete them on a short schedule. The exact retention period will be published here before mainnet. Using the relayer is optional; you can always submit from your own wallet.

7. Wallets, RPC providers and networks

Your browser wallet, the RPC endpoints the app reads from, and the blockchain networks themselves are run by third parties. They can see requests your browser sends them, such as your address and the data you read. Their own privacy policies apply.

8. Proofs and verification

Disclosure proofs are made on your device. You decide who receives one, and that reader can keep it. Checking a proof at /verify needs no wallet and no account.

9. Messages you send us

If you message us at @umbrtrade on X, we receive your handle and what you write, and use it to reply. The policies of X apply to those messages too.

10. How we use information

We use the information above to run and secure UMBR, answer you, fix bugs, prevent abuse, and meet legal obligations. We do not sell it, and we do not use it for advertising or profiling.

12. How long we keep it

Hosting and relayer logs are kept only as long as needed for security and operations. Emails are kept while the conversation is useful and then deleted. On-chain data is permanent and outside our control.

13. Your choices and rights

Depending on where you live, you may have rights to access, correct or delete personal information we hold about you, or to object to how it is used. Message @umbrtrade on X and we will respond within the time the law requires. You can clear the data on your device at any time by clearing this site's storage in your browser.