LEGAL

Privacy Policy

Last updated: March 2026

What This Policy Covers

This privacy policy covers the 1AM wallet application (browser extension and mobile app), the 1AM website (1am.xyz), and related services including Proof Station, 1AM Explorer, and ZKMint. It outlines how user privacy is protected across all 1AM products.

Your Data Stays Local

1AM is a self-custodial wallet. Your seed phrase, private keys, and wallet data are generated and stored locally on your device. 1AM never transmits, stores, or has access to your private keys or recovery phrase. All sensitive data is encrypted at rest using AES-256-GCM with 600K PBKDF2 iterations.

What We Don't Collect

We do not collect your seed phrase, private keys, passwords, transaction history, wallet balances, IP addresses tied to wallet activity, or any personally identifiable information through the wallet extension. The wallet operates without accounts, email, or KYC.

Website & Analytics

The 1AM website may use basic analytics to understand page visits and improve the experience. We do not use analytics within the wallet extension itself. Any analytics on the website comply with GDPR and applicable data protection regulations.

Cookies

The 1AM website may use essential cookies for functionality. Non-essential cookies (analytics, preferences) are only set with your consent. The wallet extension does not use cookies.

If you subscribe to our newsletter, your email address is stored securely and used solely for sending updates about 1AM. We do not share your email with third parties. You can unsubscribe at any time.

Proof Server Communication

When using Proof Station or a custom proof server, the wallet sends zero-knowledge proof requests to generate transaction proofs. These requests contain cryptographic data necessary for proof generation but do not include your private keys, seed phrase, or personal information.

Network Communication

The wallet communicates with Midnight Network indexers and nodes to sync wallet state, submit transactions, and fetch blockchain data. This communication is inherent to blockchain operation and does not transmit personal information beyond your public blockchain address.

Third-Party Services

1AM integrates with Midnight Network infrastructure, DApps (ZSwap, ZKMint, Dominion.fun), and block explorers. These services have their own privacy policies. 1AM does not share your personal data with these services beyond what is required for blockchain transactions.

Your Rights

You have the right to access, correct, or request deletion of any personal information we hold (limited to newsletter subscriptions and website analytics). You may withdraw consent at any time. For wallet data, you have full control — your keys, your data.

Security

We employ industry-standard security measures including AES-256-GCM encryption, PBKDF2 key derivation, auto-lock timeouts, brute-force protection with exponential backoff, and explicit user approval for all DApp connections and transaction signing.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

For questions about this privacy policy, contact us at team@1am.xyz.