Corisco Back to home

Last updated 31 October 2026

Privacy Policy

Corisco is built to need as little of your data as possible. There are no accounts, no analytics and no ads. This page lists what data is handled, by whom, and why.

The short version

  • We never see your private keys, recovery words or PIN.
  • We don't run analytics, crash reporting or tracking in the website or the app.
  • We don't sell or share your data for advertising.
  • The only thing we store about you is your wallet's Lightning Address, which is created automatically.

This website

  • We don't set cookies and don't use analytics or tracking scripts.
  • Your light or dark theme choice is saved in your browser's local storage. It never leaves your device.
  • Fonts are loaded from Google Fonts, so Google receives your IP address and browser details when the page loads. See Google's privacy policy.
  • Our hosting provider may keep standard server logs, such as IP addresses, to deliver the site and stop abuse.

The hardware signer

Your recovery words and private keys are stored on the device and protected by your PIN. The device only talks to the phone it is paired with over Bluetooth. It has no internet connection and sends nothing to us.

The Android app

The app has no account and no analytics. Your wallet data is stored on your phone. To work, it connects to:

  • Spark operators, which process your payments. They see your wallet's public identity key and the payments you make and receive. See spark.money for how they handle data.
  • CoinGecko, to show your balance in fiat. It sees your IP address, but not your wallet.
  • The Corisco Lightning Address service, which gives every wallet an address. See below.

The Lightning Address service

Every Corisco wallet gets a Lightning Address by default. The first time you open your wallet, the app registers it with our service, which stores:

  • your assigned username;
  • your wallet's public identity key, so it can create invoices that pay you;
  • the date it was created, and whether the address is active.

The username and key are encrypted in our database. The service doesn't store the payments it handles. A Lightning Address is public by design: anyone who knows yours can request an invoice that pays your wallet. You don't have to use or share your address. If you'd rather not have one, email us and we'll deactivate it and delete the record.

How long we keep data

We keep your Lightning Address record for as long as your wallet uses Corisco, until you ask us to delete it. Server logs are kept only as long as needed to operate and secure the service.

Your rights

Depending on where you live, you may have the right to access, correct or delete your data, or to object to how it's used. To make a request, email info@corisco.org. We may ask you to confirm that the address is yours before we act on the request.

Changes to this policy

When we update this policy, we'll change the date at the top of this page.

Contact

Privacy questions? Email info@corisco.org.