Privacy & Security
Your privacy is non-negotiable
CS Coin Wallet and Cloud Service were designed privacy-first. No private key, seed phrase, or sensitive data is ever transmitted to or stored on our servers.
Last updated: May 2026
Chrome extension — local data
The CS Coin Wallet extension stores all sensitive data exclusively on your device, using the browser's chrome.storage.local API.
Seed phrase encrypted with AES-GCM + PBKDF2 using your password — no server access
Private keys only exist in memory inside the isolated service worker, never written in plain text
The session is automatically locked after 15 minutes of inactivity
No data is shared with third parties, advertisers, or analytics services
Backend — non-custodial proxy
Our backend acts exclusively as a stateless proxy for queries to the CS Coin network node. It never knows, stores, or can access your private keys.
Balance and UTXO queries are performed on behalf of the public address (t1…)
Transaction broadcasting only receives the hex of an already locally-signed transaction
No personally identifiable information is logged on the server
Communication exclusively via HTTPS
Email backup (optional)
The email backup service is completely optional. If you choose to use it:
Only an encrypted blob (AES-GCM) is sent to the server — encryption happens in your browser before transmission
The server stores the encrypted blob, the email address, and an optional password hint (never the password itself)
Without your password, the server is unable to decrypt the content — not even we have access to your seed
The email is used exclusively to send the recovery link — never for marketing
What we never do
We never store private keys, seeds, or passwords in plain text
We never track your browsing, transactions, or behavior in the wallet
We never sell, rent, or share your data with third parties
We never inject analytics or advertising scripts into the extension
We never collect usage data without explicit consent
What we collect (and why)
We collect the strict minimum necessary for our services to function:
Email — only if you use the optional backup, to send the recovery link
Public addresses (t1…) — queried on the blockchain node to display balance and history
Server error logs — retained for up to 7 days for technical diagnostics, with no identifiable personal data
Technical security
AES-256-GCM encryption for locally stored seeds
Key derivation with PBKDF2 (100,000 iterations) from the user's password
ZIP 243 transaction signing executed locally inside the isolated service worker
Host permissions restricted to the official domain (
cscloudservice.com)Strict Content Security Policy on the extension: no eval, no inline scripts
All backend communication over HTTPS with TLS 1.2+
Data retention and deletion
You have full control over your data:
Local extension data can be removed at any time under Settings → Extensions → CS Coin Wallet → Clear data
To delete your email backup from the server, send a request to contact@cscloudservice.com
Email backups inactive for more than 12 months are automatically deleted
Server logs are automatically purged after 7 days
Questions or privacy requests?
Contact our team. We respond within 5 business days.
contact@cscloudservice.com