Advanced technical details
How the key is split. We make the 12 words under the scratch panel, so treat us as knowing that half. The other 12 words are made on your own device and we never see them. Both halves are needed to spend, so our half on its own is worth nothing, and that is the point of the design.
What the two servers see. To check a balance and to send, this app talks to two public bitcoin servers (blockstream.info and mempool.space). They cannot move your bitcoin and never see your words or your name. They do see the card's address, your device's internet (IP) address, and, when you send, the wallet address you are sending to. Before this app will move anything, both servers must report the same balance: if they disagree or one is unreachable it refuses to sign rather than guess, so an outage at either one stops this app until it clears. Your bitcoin is unaffected by that, and the offline tool needs no servers at all.
Being straight about checking this app. The fingerprint below is worked out by this page itself, and the value you would compare it against is published on our site. If someone had replaced this page they could change both, so this catches an accident or a damaged copy, not a determined attacker. The check that actually holds is not depending on our website at all: the offline tool contains no network code and hands the key to a wallet app you already trust.
starting...