{
  "slug": "keystone",
  "category": "crypto-wallets",
  "name": "Keystone",
  "description": "Air-gapped hardware wallet that signs transactions by QR code and works with third-party software wallets. The Keystone 3 Pro firmware and hardware schematics are published.",
  "website": "https://keyst.one",
  "source": "https://github.com/KeystoneHQ/keystone3-firmware",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "HK",
    "name": "Hong Kong",
    "eyes": null,
    "eu": false,
    "gdpr": false,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 35,
  "coverage": 100,
  "summary": "Keystone scores 35 out of 100 (grade F) on the crypto wallets criteria. It partly meets open source, no ads or data sales and independent audit. It does not meet no trackers or telemetry. It is based in Hong Kong: Not in the Five, Nine or Fourteen Eyes.",
  "url": "https://privacyratings.com/crypto-wallets/keystone/",
  "markdown": "https://privacyratings.com/crypto-wallets/keystone/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://keyst.one/open-source",
      "note": "The Keystone 3 firmware is MIT licensed, but some third-party chip vendor libraries are not open."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://keyst.one/privacy-policy",
      "note": "The privacy policy names Google Analytics and advertising pixels, and the website loads Google Tag Manager, Mixpanel and the Facebook pixel."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://keyst.one/privacy-policy",
      "note": "Funded by hardware sales, but the privacy policy says site use, purchases and ad interactions are shared with advertising partners. It states personal data is not sold."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://keyst.one/open-source",
      "note": "Keystone names SlowMist and Keylabs as reviewers of the Keystone 3 Pro firmware and hardware, but the full reports are not linked."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Analytics",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "Meta Pixel",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "Reddit Pixel",
        "host": "www.redditstatic.com",
        "effect": "no"
      },
      {
        "name": "Trustpilot",
        "host": "www.trustpilot.com",
        "effect": "none"
      },
      {
        "name": "X (Twitter) Pixel",
        "host": "static.ads-twitter.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T06:59:53.058Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}