Effective date: August 10, 2026. Applies to the Foundry Wallet browser extension for Chrome and Edge, published by DTF Solutions Inc. Separate policies apply to the Foundry Wallet mobile and Safari/macOS apps.

Foundry Wallet is a self-custody signing wallet for members of organizations that use the Digital Trust Foundry platform. It is built so that your cryptographic keys never leave your device. This page describes exactly what the extension stores, what it transmits, and to whom.

What the extension stores on your device

All of the following is kept in the extension’s local browser storage on your device and nowhere else:

• Your private signing keys, in encrypted form, and your digital identity (your KERI AID).
• Your wallet settings, including the platform address of the organization tenant you connected to.
• A local history of signing requests you have received and how you responded to them, so you can review your own activity.
• If you enable biometric protection, the enrollment data needed to require a WebAuthn (fingerprint / Windows Hello / Touch ID) confirmation before each approval. Biometric verification happens entirely on your device through your browser and operating system; we never see or receive biometric data.

We have no access to any of this. Removing the extension, or using its Clear Wallet function, deletes it.

What the extension transmits, and to whom

The extension communicates with exactly one service: the Digital Trust Foundry tenant of the organization you connected it to (an address your organization’s administrator gives you). It sends:

• Registration of your public key and identity with that tenant, when you connect and create your identity. Only public material is sent — never private keys.
• Authenticated polling requests, so pending signing requests from your organization reach your wallet.
• Your signatures and approval/rejection responses to those requests.

When a website asks the wallet to sign something, the extension processes that request and shows you the requesting site’s origin so you can decide. The origin is part of what you see and what is recorded in your local history; approving sends your response to your organization’s tenant.

The extension makes web pages able to talk to it by exposing a small programming interface (window.edgeKeri) to sites you visit. This interface does nothing unless a page explicitly calls it, and no page can extract keys or sign anything without your explicit approval in the wallet. The extension does not otherwise read, collect, or modify the content of pages you visit, and it does not track your browsing.

What we do not do

• No analytics, telemetry, or tracking of any kind.
• No advertising and no sale or sharing of data with third parties, ever.
• No collection of browsing history.
• No accounts with us: your relationship is with your organization’s tenant, not with DTF Solutions Inc.

Data retention and deletion

Everything the extension stores lives on your device and is yours to delete at any time (remove the extension or clear the wallet). Records your organization holds — such as signatures you submitted to its tenant — are governed by your organization’s own policies; contact your administrator about those.

Changes to this policy

If the extension’s behavior changes in a way that affects this policy, we will update this page and the extension’s store listing before the change ships.

Contact

Questions about this policy or the extension: alan@digitaltrustfoundry.com — DTF Solutions Inc.