Privacy

BondCheck works without an account. We store as little as we can, and you can delete all of it yourself at any time.

Last updated 7 June 2026

What we store when you keep a bond list

A random wallet identifier.
A hashed copy of the secret key held by your browser or phone. We cannot read the key itself.
A hashed copy of your current sync code, used to move your list to another device.
The bonds you add: denomination, number and an optional label you type.
Wins and near misses we find for those bonds, and whether you have seen them.
Your language and time zone, so reminders arrive at a sensible hour.
If you turn on notifications: the push address your browser or phone gives us.

Your name, phone number, email address or CNIC.
Your IP address, location or device details. Rate limits use a one-way hash that cannot be turned back into an address.
The numbers you check without adding them to a list. Quick checks are not logged.

One strictly necessary cookie keeps your bond list connected to your browser. It is not used for anything else.
Your language choice and light or dark theme are remembered in your browser.
We count page views with a cookieless analytics service. It does not identify you or follow you across sites.

Open My bonds, then Settings, then Delete wallet. Your bonds, wins, sync codes and push addresses are removed from our database at once.
Clearing your browser data removes the copy kept on your device.

Data is stored with our hosting and database providers on servers that may be outside Pakistan, encrypted in transit.