Privacy Policy

Waldrive (“Waldrive,” “we,” “us”) is a decentralized file storage and sharing application built on the Sui blockchain, Walrus storage, and SEAL encryption, operated by Cryptokarigar. This policy explains what information is involved when you use Waldrive at waldrive.xyz and how it is handled. Because Waldrive is built on decentralized infrastructure, the way your data is processed differs from a typical centralized service — please read carefully.

Wallet-based identity

Your Sui wallet address is your account. There is no email/password sign-up. When you connect a wallet, we process your public wallet address to load your files, collections, and subscription. We never have access to your private keys or seed phrase.

Sign in with Google (zkLogin)

If you choose “Sign in with Google,” authentication is handled through Enoki (by Mysten Labs) using zkLogin. In this flow we receive limited Google profile information (such as your email address and basic profile details) solely to authenticate you and derive your Sui address. We do not receive or store your Google password. zkLogin is designed so your Google identity is not publicly linked to your on-chain address. Your use of Google sign-in is also subject to Google’s and Mysten Labs’ privacy policies.

Files and content

Files you upload are encrypted in your browser with SEAL before they leave your device, then stored as blobs on the Walrus decentralized storage network. We cannot read, decrypt, or recover the contents of your encrypted files. File metadata — such as file name, size, type, tags, and access policy — is recorded on the Sui blockchain and is publicly visible by the nature of a public ledger. Do not put sensitive information in file names, tags, or other metadata.

Information we process

• Your public wallet address and on-chain activity (public on Sui).
• Google profile email/basic profile, only if you use Google sign-in.
• File metadata you create (names, sizes, types, tags, sharing policies).
• Basic technical and usage data needed to operate the app (e.g., requests to our servers).

How information is used

• To authenticate you and display your drive, collections, and subscription.
• To enable encryption, sharing, and access-control features.
• To process subscription payments (settled on-chain in USDC).
• To operate, secure, and improve the service.

Disclosure and third parties

We do not sell your personal information. On-chain data (your address, transactions, and file metadata) is inherently public. Waldrive relies on third-party infrastructure to function, including the Sui network, Walrus storage, SEAL key servers, Enoki/zkLogin and Google (for optional sign-in). These operate under their own terms and policies.

Data retention and deletion

Encrypted blobs persist on Walrus until their storage period (epochs) expires. On-chain records are immutable and cannot be edited or deleted once written. Deleting a file in Waldrive removes its on-chain registry entry, but the underlying Walrus blob remains until its storage period ends.

Security

Encryption happens client-side and access policies are enforced on-chain via SEAL. You are responsible for safeguarding your wallet and keys. We cannot recover access to files if you lose control of your wallet.

Children

Waldrive is not directed to children under 13 (or the minimum age required in your jurisdiction).

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions? Email hello@waldrive.xyz.

This document is a template provided for transparency and to satisfy third-party integration requirements. It is not legal advice; please have it reviewed by qualified counsel before relying on it.