# COLDCARD privacy rating

Bitcoin-only hardware wallet from Coinkite designed for air-gapped signing using a microSD card or NFC, with secure elements, PIN protection and multisig support.

## Summary

COLDCARD scores 50 out of 100 (grade D) on the crypto wallets criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in Canada: Five Eyes member.

- Website: https://coldcard.com
- Source code: https://github.com/Coldcard/firmware
- Jurisdiction: Canada. Five Eyes member.
- Home page trackers: Cloudflare Web Analytics (cookieless analytics), Google Analytics, Google Tag Manager, YouTube embed (not scored)
- Category: [Crypto wallets](https://privacyratings.com/crypto-wallets/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All firmware code is public under the MIT license with the Commons Clause, a source-available combination that is not OSI-approved. | https://github.com/Coldcard/firmware/blob/master/COPYING-CC |
| No trackers or telemetry | No | The coldcard.com website loads Google Analytics through Google Tag Manager. |  |
| No ads or data sales | Yes | Funded by hardware sales. The privacy policy states personal information is not sold or rented to third parties. | https://coinkite.com/privacy |
| Independent audit | No | No independent audit is published. The security status page lists only scoped reviews and states no complete independent audit of the firmware is established. | https://coldcard.com/security/status |

Source: https://privacyratings.com/crypto-wallets/coldcard/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/crypto-wallets/coldcard.md