> ## Documentation Index
> Fetch the complete documentation index at: https://help.bitcoincontrolcenter.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy and security

> What stays local and what leaves your device.

## Stays on your device

* Accounts, balances, history, settings, and statements.
* Exchange API keys, encrypted with a key stored next to your data.
* Your PIN, stored as a one-way hash.

No Hoseki account. No telemetry. Hoseki cannot see your data.

## Leaves your device

```mermaid theme={null}
flowchart LR
  CC["Control Center<br/>on your device"]
  CC -- "addresses you track" --> E["Electrum server"]
  CC -- "API requests" --> X["Exchanges"]
  CC -- "price requests" --> P["Price source"]
  CC -- "statement lookups" --> M["mempool.space<br/>or your Electrum server"]
```

| Who | What they see | How to limit it |
| - | - | - |
| Your Electrum server | The addresses you track, and your IP address | Use your own server. Use Tor for remote servers. |
| Exchanges | Requests made with your API key | Use read-only keys. |
| Price source | Price requests, no wallet data | Use your own Mempool on StartOS or Umbrel. |
| mempool.space (desktop statements) | Your IP address and the transactions on your statement | Set **Statement data** to **Configured Electrum server**. |
| bitcoincontrolcenter.com (desktop) | Your IP address, once a day. No app or wallet data. | — |

> [!WARNING]
>
> The desktop app starts on **Blockstream's public Electrum server**. Blockstream can see the addresses you track until you switch. See [First run](https://help.bitcoincontrolcenter.com/getting-started/first-run.md#3-choose-an-electrum-server-desktop).

## Most private setup

1. Run your own node with an Electrum server.
2. On desktop, connect to it. Use its `.onion` address with **Connect via Tor** when you're away from home.
3. Set **Statement data** to **Configured Electrum server**.
4. On StartOS or Umbrel, use **Your mempool server** as the price source.

## Stay safe

* Never enter a seed phrase or private key. Control Center only needs public keys.
* Use read-only exchange API keys.
* Set a PIN you don't use elsewhere. See [PIN and lock](https://help.bitcoincontrolcenter.com/security/pin.md).
* Delete wallet export and descriptor files after you use them.
* Remove xpubs, addresses, and keys from logs before you share them.
* Report security issues privately. See [SECURITY.md](https://github.com/hoseki-inc/bitcoin-control-center/blob/main/SECURITY.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.