Devoid collects nothing.

Devoid is a non-custodial Zcash wallet. It runs on your device, it has no accounts, and the people who make it never receive your keys, your balances or your payments. This page explains exactly what stays on your device and what leaves it.

Last updated 24 October 2026.

What stays on your device

Your recovery phrase. Encrypted with your passphrase (the age format) and stored in the wallet folder on your device. It is decrypted only for a moment, to sign, when you enter your passphrase.
Your passphrase. Never stored. It is sent from the Devoid page to the Devoid process on your own device for each action that needs it, and then discarded.
Your wallet data. Balances, addresses, transaction history and memos, in a database in the wallet folder.
Your contacts, saved lists and settings. Stored as plain files in the wallet folder. They are not encrypted, so anyone with access to your device account can read them.
In your browser. A session key that lets the page talk to your wallet (cleared when you close the tab) and your theme choice.

What leaves your device

To see your balance and to send payments, Devoid talks to a Zcash lightwalletd server. You choose which one in Settings; the default is a public server. That server:

sees your IP address, unless you connect through Tor or your own SOCKS5 proxy;
sends you blocks, which Devoid scans on your device to find your payments;
receives the transactions you send, so it can broadcast them. Shielded transactions hide the recipients, amounts and memos from it and from everyone else.

Devoid sends nothing else anywhere. There is no analytics, no crash reporting, no telemetry, no advertising and no third-party code.

This website

This site is a set of static pages with no cookies and no analytics. The product page's only script remembers whether you chose the light or dark theme, in your browser's storage; nothing is sent anywhere. The web wallet is described below. It is hosted on Cloudflare, which, like any web host, processes the technical data of each request (such as your IP address and browser) to deliver the page and protect it from abuse. See Cloudflare’s privacy policy.

The web wallet

The wallet at /app runs entirely in your browser. There is no Devoid server: the page downloads its code from this site, and the wallet engine (the same Rust code as the desktop app, compiled to WebAssembly) runs on your device. You choose one of two kinds of wallet.

A real wallet is a Zcash wallet on mainnet, holding real ZEC, or on the test network, whose coins have no value.

What it stores, in this browser only. Your recovery phrase, encrypted with your passphrase (the same age encryption as the desktop app), and the wallet database: balances, addresses, transactions and memos. They are kept in this site's IndexedDB storage. Your passphrase is never stored.
What leaves your browser. To sync and to send, the wallet talks to a lightwalletd server through a gRPC-web proxy run by ChainSafe (zcash-mainnet.chainsafe.dev, or zcash-testnet.chainsafe.dev for a testnet wallet). That server sees your IP address and the transactions you broadcast; shielded transactions hide recipients, amounts and memos from it. A browser cannot use Tor; the desktop app can. The first payment also downloads the Sapling proving parameters from this site.

A demo runs on a simulated chain with play money and connects to no Zcash server. It stores a made-up wallet (with words that cannot restore a real one and a salted hash of the passphrase you chose) in this browser's local storage.

What the web version never asks for. A recovery phrase. To use your wallet in another browser or on another device, download its wallet file in Settings and open it there with your passphrase. The file is encrypted with your passphrase (AES-256, with the key derived by PBKDF2) and goes only where you save it; nothing is uploaded.
Staying unlocked. After you sign, you can stay unlocked in that tab for 15 minutes. The passphrase is then kept in the page's memory only, never written to storage, and is forgotten when you lock, after 15 minutes without activity, or when the tab closes.
Unlocking with a passkey. If you choose to, your device can unlock the wallet instead of your passphrase. This is not a login: there is no account and no server to log in to. The passkey never leaves your device, and nothing about it is sent anywhere. What it does is derive a secret of its own (the WebAuthn PRF extension), which encrypts your passphrase into this browser's storage; your face, fingerprint or PIN is what decrypts it again. Your passphrase still works and is still the only way to show the recovery phrase. Remove it in Settings, and delete the passkey itself in your device's own settings. Anyone who can unlock the device can then spend from this wallet, which is why it is off until you turn it on.
Installing it. Devoid can be added to your home screen and opened in its own window. Installing copies nothing anywhere: the browser keeps the app's own files (the page, its code, the fonts and icons, and the wallet engine once you use it) so it opens without a connection. There is no app store, no account and no download of your wallet.
Deleting it. Settings, then Delete this wallet (or Reset the demo); or clear this site's data in your browser. A deleted wallet can be opened again from a wallet file, or restored from its recovery phrase in the desktop app.
Your lists, contacts and settings are kept in this browser's local storage, separately for each kind of wallet.

The Chrome extension

It will follow the same rules: the wallet runs on your device, your keys never leave it, and nothing is collected. This policy will be updated before it is released.

Changes and contact

If this policy changes, the date above changes with it, and the history is public in the project’s repository. Questions are welcome as an issue on GitHub.