Privacy Policy

This policy covers the WolfKey app (Android package com.beaconwolf.signin), the WolfKey browser extension and the service at connect.beaconwolf.com. WolfKey is a product of Ember Eagle Ltd ("we"). Last updated: 11 October 2026.

What WolfKey does

WolfKey makes your phone the key to your accounts. You sign in to websites with your phone instead of a password you have to remember: on websites with a "Sign in with WolfKey" button, and on other websites through the WolfKey browser extension or Android autofill. You approve with your phone's own fingerprint or screen lock. The phone then signs the request with a private key that is created in, and never leaves, the phone's secure hardware.

What we never receive

• No biometric data. Your fingerprint or face is checked by Android on your phone. We never receive it.
• No private keys. Only the matching public keys are sent to our server.
• No passwords. Your phone makes each website password itself, only after your approval. It travels end-to-end encrypted to your own browser, which fills it in and forgets it. Our server only passes on the sealed message and cannot read it. There is no list of your passwords on our server.
• No e-mail addresses of your website accounts. When you have more than one account on a website, the extension sends only a one-way code (a hash) and a masked label such as "j***@example.com", so your phone can show which account it is.
• No contacts, GPS location, photos or files.
• No seed phrase or wallet keys (WolfVault, see below).

What we store

• Your identity: the name, e-mail address and username you enter when you register.
• Your devices: the device name and Android version, the public key, and a push token so we can notify you of a new request.
• Your computers: for each connected browser extension, a name you can recognise and its public key.
• Requests: which website or application asked, the type of request and its details (for example an amount), the time, and the IP address, browser and operating system of the computer where the request started, so you can recognise it on your phone.
• Website notes: short notes that tell your phone a website accepted or refused a new password (website name, account code, type, time). No passwords.
• Recovery package: an encrypted package that lets you restore WolfKey on a new phone. It can only be opened together with the recovery code that you wrote on paper; we never receive that code. A recovery only completes after a 72-hour waiting time, during which your other devices are notified and can stop it. We keep the status and times of a recovery, and failed attempts, to block abuse.
• Encrypted backup of your website settings (which websites and settings, so a recovered phone produces the same passwords). It is encrypted on your phone; we cannot read it.
• Country: from the IP address we derive only the country (never your exact position, no GPS) of the computer that makes a request and of your phone. If they differ, your phone asks "Was this you?". Country data: IP Geolocation by DB-IP (CC BY 4.0).
• Risk check: to spot unusual sign-ins we compare a new request with your earlier approved requests: browser and operating system, website, country and hour. We do not build a profile beyond that and we do not use it for anything else. If you allow a blocked country ("It was me"), we remember that for 24 hours.
• Security log: registrations, approvals, denials, recoveries and revocations, with time and IP address.

Filling in on your phone (Android autofill)

When you let WolfKey fill in a password in a browser on the same phone, everything happens on the phone. Nothing about it is sent to our server.

Two-step codes

If you store two-step (2FA) codes in WolfKey, the secret stays on your phone. When the extension asks for a code, only the code itself is sent, end-to-end encrypted, to your browser.

WolfVault (test networks only)

WolfVault is a trial of a crypto vault with three keys, two needed, on test networks only. If you use it, we store the public address of your vault, its owner addresses, the network and the time of creation, and the requests you approve on your phone (network, amount, recipient). These addresses are public on the blockchain anyway. We never hold a key, seed phrase or funds.

Why

Only to provide the service: to show requests on your phone, to verify your approvals, to let you recover WolfKey, to prevent fraud and misuse, and to give websites you approve a signed confirmation of who you are (your username, name and e-mail address). We do not sell data, show ads or build profiles.

Who else processes data

• Google Firebase Cloud Messaging delivers the push notification. The notification only says that a request is waiting; the details are fetched directly from our server.
• DigitalOcean hosts our server in Frankfurt, Germany.
• Websites you approve receive a signed token with your username, name and e-mail address, and only after you approve.

Permissions the app uses

• Internet, to receive and answer requests.
• Biometrics, so Android can check your fingerprint or face. We never receive it.
• Notifications and vibration, to tell you that a request is waiting.
• Autofill service (only if you switch it on in Android settings), to fill in passwords on this phone.

Security

All traffic is encrypted (HTTPS), and passwords and codes are additionally encrypted end to end. Every request can be approved once and expires within a minute. You can disconnect a lost computer or revoke a lost phone from the app.

Retention and deletion

We keep your data while your identity exists. You can delete your identity at any time in the app (Delete my identity), which erases your name, e-mail address, username, devices, push tokens, recovery package and encrypted backup from our server immediately. Security log entries are kept for up to 12 months with only an internal identifier. See how to delete your account.

Your rights

You can ask for access, correction or deletion of your data, or object to its processing, via the contact form on beaconwolf.com. You can also complain to your data protection authority.

Children

WolfKey is not intended for children under 16.

Changes

When this policy changes, we update the date at the top. Important changes are also announced in the app.