Privacy Policy

The short version

ElyShield is built so that we cannot see your data even if we wanted to. Encryption and decryption happen in your browser. Files, keys, and message plaintext never reach us.

What we do not collect

• File contents or filenames
• Encryption keys, key files or passphrases
• Wallet signatures
• Message plaintext
• Personal information

Stored in your browser

A few small records live in your browser's local storage and never leave your device: today's count of file encryptions, used for the tier limit; for each wallet address that passed the first-use signing check on this device, a flag saying so; and the wallet connection the wallet library keeps so it can reconnect. No signature and no key is ever stored. Clearing this site's data removes them all.

Analytics

We do not run third-party analytics or advertising trackers, and we set no cookies. Our hosting provider may keep standard, aggregate request logs (IP address, path, timestamp) for security and abuse prevention. Wallet addresses are never part of those logs.

Blockchain reads

There is no token, so connecting a wallet reads no balance and no allowance. The only chain call the app can make is a plain eth_getCode to check whether an address is a contract, and it is skipped entirely unless you ask for it. That read is unauthenticated and identical to querying any block explorer. No wallet address is stored by us, and pages you visit without connecting a wallet send nothing to a chain.

Third-party services

Our site is served by Cloudflare Pages. See Cloudflare's Privacy Policy.

Changes

We may update this policy.

Contact

Questions about privacy, or a security report: hello@elyshield.xyz