QMask Privacy Policy

QMask is a self custody, post-quantum wallet for the Quantova network. This Privacy Policy explains what information is involved when you use the wallet and this website, what we deliberately never collect, and the choices that remain entirely yours.

The guiding principle is simple. The information that matters most, your recovery phrase, your private keys and your unlock password, is created and held only on your own device. We never receive it, so we can never read it, share it or lose it.

By using QMask you agree to the handling of information as described here. If you do not agree, please do not use the wallet.

A self custody wallet puts you in sole control of your assets and your secrets. There is no account to open with us, no identity document to submit, and no central database of user funds.

Because of this design, most of what a traditional service would collect simply does not exist on our side. The trade is that you, and only you, are responsible for safeguarding your recovery phrase.

The following are generated and stored only on your device and are never transmitted to Quantova or to any third party by the wallet:

• Your recovery phrase and recovery words
• Your private post-quantum signing keys
• Your unlock password
• The decrypted contents of your wallet

No part of this material is sent to a server, exposed to a web page, or written anywhere we can reach.

To work as a wallet, QMask keeps an encrypted store and your settings in the local storage of your browser or the secure storage of your phone. This data stays on the device and is used to show balances, sign the transactions you approve, and remember your preferences.

When you unlock the wallet, decrypted secrets are held only in volatile memory and are cleared when the application closes.

To show live balances and to broadcast the transactions you approve, the wallet connects to the Quantova network through a node endpoint over the q_* interface. These requests carry public information such as your Q address and the signed transaction you chose to send. They never carry your keys or your password.

Quantova is a public, decentralised network. Once a transaction is finalised, its on chain record is visible to anyone, as is true of any public blockchain. The signature that authorises it is post-quantum, so it cannot be forged by a quantum capable adversary.

To display prices, the wallet requests market data by asset symbol only. No address and no personal identifier is sent in order to show a price.

When you connect to an application such as the Quantova development environment, that application is a separate party with its own terms and privacy practices. QMask only shares what you approve, and never your keys.

This website is an information site. It does not require you to sign in and does not ask for personal details in order to read it.

The site aims to run without advertising trackers. Any analytics used to understand general traffic are configured to avoid collecting information that identifies you personally. If a contact form or newsletter is offered in future, any details you choose to provide will be used only for the purpose you provided them.

The website may use a small amount of local storage to remember display preferences. The wallet uses local storage to hold your encrypted data and settings as described above. These are technical necessities for the product to function and are not used to build a profile of you.

Security is built into the foundation rather than added on top. Your secrets are sealed on your device and can be unlocked only by you. On mobile they are held in the platform keychain and released only when you unlock the device, with biometric protection where the hardware supports it.

Every transaction is authorised with a NIST approved post-quantum signature, and the wallet exposes no key material to web pages. This protects you not only today but against a future adversary equipped with a large quantum computer.

We do not sell your information, because we do not hold the information that a self custody wallet keeps on your device. Any limited operational data is used only to run the service you asked for.

We may disclose information where we are legally required to do so, but we cannot disclose secrets we never possess, including your keys, your recovery phrase and your password.

The wallet communicates with the Quantova network, which is distributed across many independent operators in many places. Public blockchain data is by its nature visible across that network. Any limited personal data is handled in line with this policy wherever it is processed.

QMask is not directed at children. It is intended for people who are old enough to be responsible for their own digital assets in their jurisdiction.

You control the data that lives on your device. You can remove it at any time by removing the wallet or clearing its storage. You can decline optional features such as price data, and you can choose which applications you connect to.

We may update this policy as the product develops or as the law requires. When we do, we will revise the date shown on this page and, where it is practical, highlight significant changes.

Questions about this policy can be raised through the contact channel published on the official Quantova website. Because the wallet is self custody, please remember that we can never recover a lost recovery phrase or password.