KeyBackEffective date: 4 November 2026
1. Who is responsible
KeyBack Wallet Recovery is a founder-led business project operated by Oren Barak. KeyBack is the controller of personal information described in this policy. Privacy questions and requests may be sent to contact@keybackrecovery.com.
2. Information KeyBack collects
When you submit the feasibility-assessment form, KeyBack receives the information you choose to provide. The current form may collect:
- your name, email address, and optional telephone number or preferred contact method;
- wallet software, cryptocurrency or network, approximate creation year, and software version if known;
- the non-secret recovery material that still exists;
- a description of the access problem, error messages, previous attempts, and preservation status;
- non-secret password characteristics, such as approximate length, likely language, structure, capitalization, numbers, or special-character patterns;
- your capacity as owner, authorized representative, heir, estate representative, or fiduciary, and a non-sensitive description of available ownership evidence;
- an optional approximate value range; and
- the confirmations required by the form, together with a generated Case ID and preliminary internal assessment result.
KeyBack may also receive ordinary correspondence sent to contact@keybackrecovery.com and technical website-use information described below.
Do not submit seed phrases, private keys, complete passwords, recovery codes, PINs, wallet files, wallet contents, or other secret wallet material through the public form or ordinary email.
3. Why the information is used
KeyBack uses assessment and correspondence information to:
- evaluate whether an owner-authorized recovery case may be technically feasible;
- communicate with you about the inquiry;
- verify ownership, identity, or lawful authority before any recovery work;
- define scope, pricing, and case-specific terms if both sides choose to proceed;
- prevent misuse, fraud, or unauthorized-access requests;
- maintain necessary business, security, and legal records; and
- comply with applicable law.
Depending on the circumstances, processing may be based on your request for a preliminary assessment or steps toward an agreement, KeyBack's legitimate interests in operating and protecting the service, compliance with legal obligations, or consent where applicable. KeyBack does not sell assessment information.
4. Forms, email, hosting, and service providers
The public form is delivered through FormSubmit to contact@keybackrecovery.com. FormSubmit processes the submitted fields for delivery. Email correspondence is processed through Zoho Mail. The website is published through the existing ChatGPT Sites / Cloudflare infrastructure.
These providers may process limited information needed to provide their services and may apply their own retention, security, and privacy terms. KeyBack does not promise that a third-party provider deletes data on KeyBack's internal timetable where KeyBack does not control that provider's systems.
If you do not wish to use FormSubmit, you may email a non-sensitive description directly to contact@keybackrecovery.com.
5. Analytics and cookies
The website uses Google Analytics 4 to understand aggregate website usage and improve the customer journey. When enabled, Google Analytics may process browser or device information, approximate location, referring page, pages viewed, and interactions such as opening or starting the assessment, validation errors, successful submission confirmation, and clicks on the email fallback.
KeyBack's implementation is designed not to send names, email addresses, telephone numbers, wallet descriptions, passwords, seed phrases, private keys, wallet files, or Case IDs to Google Analytics.
Google Analytics may use first-party cookies, including `_ga` and a property-specific `_ga_*` cookie. Analytics is not activated until the visitor chooses to accept it. A visitor may refuse analytics without losing access to the website or assessment form. The persistent Analytics settings control allows the visitor to change or withdraw consent at any time. Withdrawal prevents further analytics collection from that browser from that point forward; it does not erase information already processed before withdrawal.
6. Retention
KeyBack follows a data-minimization approach:
- an inquiry that does not become an active case is normally deleted or anonymized within 12 months, unless it must be retained longer for fraud prevention, a dispute, debt collection, legal compliance, or another lawful and proportionate reason;
- active-case information is retained while the assessment or agreed work is in progress;
- after a case closes, contracts, invoices, payment records, authorization evidence, and necessary correspondence are retained only for the period required by applicable legal, accounting, tax, dispute, or fraud-prevention obligations;
- any retention and deletion arrangements for wallet files or other sensitive technical material must be agreed separately in writing before such material is transferred.
Third-party providers may apply their own retention periods. KeyBack will periodically review whether retained personal information remains necessary.
7. Security and sensitive material
KeyBack uses reasonable organizational and technical safeguards appropriate to the information it controls. No internet transmission, email service, hosting platform, or storage system can be guaranteed completely secure.
The public form and ordinary email are not approved channels for wallet secrets or wallet files. If sensitive material may later be necessary, KeyBack and the client must first agree in writing on the scope and transfer method for that specific case. This policy does not claim that KeyBack operates an audited security system, a particular encryption platform, or a guaranteed deletion technology.
8. Sharing and disclosure
KeyBack may disclose information only as reasonably necessary:
- to the service providers identified above;
- to a specialist or contractor only where necessary for an agreed case and subject to the client's prior written consent and appropriate confidentiality terms;
- to comply with law, a lawful request, or legal proceedings; or
- to protect rights, security, ownership, or prevent fraud and unauthorized access.
KeyBack does not publish client information as a testimonial or case study without separate permission.
9. International processing
KeyBack serves international users. Hosting, analytics, form-delivery, and email providers may process information outside your country. Where applicable law requires a specific transfer safeguard, consent, or notice, KeyBack will apply the required measure before relying on that processing.
10. Your rights
You may contact contact@keybackrecovery.com to request access to personal information KeyBack holds about you, correction of inaccurate information, deletion, restriction, or another right available under applicable law.
KeyBack may request reasonable information to verify identity or authority before acting. KeyBack aims to respond within 30 days and may extend or refuse a request only where applicable law permits, explaining the reason where required. Certain records may be retained where necessary for legal compliance, disputes, fraud prevention, or establishing or defending legal claims.
11. Age and authorized representatives
The service is intended for people aged 18 or older. A guardian, executor, heir, estate representative, fiduciary, or other representative may submit an inquiry only when legally authorized and able to provide appropriate non-secret evidence of that authority.
12. External links
The website may link to credential-verification services or other external sites. Visiting those sites is optional and is governed by the destination site's privacy practices.
13. Changes and contact
Material changes to this policy will be shown with an updated effective date. Questions or privacy requests may be sent to contact@keybackrecovery.com.
This policy describes KeyBack's current public website and assessment process. It is not a substitute for independent legal advice.