Privateer wallet / bearing 01Signal: dark

Zero-knowledge wallet · leave no wake

The wallet that knows nothing about you.

Self-custody for Bitcoin, Monero, and Dbloon, with Bitcoin Silent Payments for sending and receiving.

Get the iOS beta Explore the wallet

No accountNo telemetryLocal signing

Captain's glass / iOS betaRegtest waters

Article I · Leave no wake

Privacy is not a mode you turn on.

ColdHarbor begins with no identity layer, keeps signing keys on your device, and makes every network state visible before you commit.

The product

A wallet flow that never asks you to trust the interface blindly.

Every consequential action has a clear review state, a visible network state, and a final outcome.

Onboarding

Begin without an account

Create or import locally. ColdHarbor never receives the recovery phrase.

Bitcoin Silent Payments

One public code. A fresh destination for every payment.

BIP-352 lets a sender derive a unique Bitcoin output from your reusable payment code. ColdHarbor scans for matching outputs without publishing a new address each time.

How Silent Payments work

01ShareReusable BIP-352 code

02DeriveUnique Bitcoin output

03DiscoverLocal wallet scan

Asset focus

Privacy assets, without pretending they are the same thing.

₿

Bitcoin

Portfolio, send, and receive. Payments use BIP-352 Silent Payments.

Payment rail

Monero

Held as a distinct privacy asset with chain-specific status and controls.

Asset focus

Dbloon

Native CPU-mined proof-of-work coin (DBL). Send and receive dbl1 addresses directly.

Asset focus

ColdHarbor does not route non-Bitcoin payments through Silent Payments.

Security model

Your keys stay aboard.

Recovery material is created locally. Device security gates access. Transactions are reviewed and signed before network submission.

Read the security model

Key creationOn device

SigningLocal

IdentityNone required

TelemetryNone

How ColdHarbor differs

The same actions, with less about you left behind.

A plain comparison against how a typical mobile wallet handles the same concerns. No absolutes—just the defaults ColdHarbor chooses.

ConcernColdHarborTypical wallet

Account identity◆ None required◇ Email or KYC common

Receiving address◆ Reusable Silent Payment code◇ Reused or manual new address

Usage analytics◆ None in the wallet◇ Telemetry SDKs common

Key custody◆ On device only◇ Varies; custodial options

Network endpoint◆ Relay hides the node◇ Direct third-party API

Fleet · relay network

Your node never surfaces.

ColdHarbor reaches the network through a relay, so the wallet holding your keys never hails a third-party endpoint directly.

ColdHarbor for iOS · Privateer build

Leave no wake.

Private self-custody, with every important state in plain sight.

Get the iOS beta iOS 17+ · Regtest beta · Never use real funds