This disclosure is part of the Terms. It is not exhaustive, and it is not investment advice. It describes the risks that follow structurally from how veilnebu.la is built, rather than the generic ones a disclaimer usually lists.
1. Losing the recovery phrase loses the funds
The wallet generates a BIP-39 recovery phrase on your device. It is not transmitted to us, not backed up to a cloud, and not derivable from anything we hold. There is no copy on any server, so there is nothing for us to send you, nothing for a court to order us to produce, and nothing an identity check could unlock even if we ran one.
If the phrase is lost and the device is lost, the funds are permanently inaccessible. That is not a policy we could choose to relax — it is arithmetic.
2. The PIN is part of the encryption, not a lock screen
Your recovery phrase is sealed on the device inside an encryption envelope: the PIN is stretched with scrypt into a key-encryption key, which unwraps a random data key, which decrypts the phrase. Biometric unlock is a convenience layer over that PIN and never a replacement for it.
The consequence is the important part. Forgetting the PIN does not lock you out of a UI you could reinstall past — it means the ciphertext on the device cannot be opened by anyone, us included. Recovery from that state requires the recovery phrase, and only the recovery phrase.
3. Disclosing the phrase is the same as losing it
Anyone who reads your twelve or twenty-four words can move every asset the wallet derives, on every chain, immediately and irreversibly. We will never ask for it. Any message, site, form, support agent or airdrop claiming to need it — whether or not it carries our name — is a theft attempt without exception.
4. On-chain transactions cannot be reversed
Once a transaction is broadcast and confirmed, it is final. There is no issuer, no clearing house, and no operator with the authority to claw it back. In particular:
- An amount sent to a wrong but valid address belongs to whoever controls that address.
- An amount sent to the right address on the wrong network may be unreachable, and where recovery is technically possible it is best-effort and not guaranteed.
- A token sent to a contract that is not the token is gone; a contract address that cannot be verified is a guess, and we do not list assets on guesses.
- Address-substitution malware and clipboard hijackers target exactly this step. Verify the full address, not the first and last four characters.
5. Chain support is uneven, and the gaps matter
The wallet derives and displays addresses for more chains than it can spend from. Bitcoin, Litecoin, Dogecoin and Bitcoin Cash addresses receive — there is no UTXO transaction builder behind them yet, so the app will not offer to send from those balances and will tell you why. Sending is available on Ethereum, BNB Smart Chain, Polygon, Arbitrum, Base and TRON.
Treat a receive-only balance as parked, not as liquid. If that is not acceptable for an asset, do not hold it here yet.
6. Confirmations are not instant, and depth is not certainty
A transaction is only as final as the number of blocks built on it. The wallet and the gateway use the same confirmation depths — twelve blocks on Ethereum, fifteen on BSC, twenty on TRON, three on Bitcoin — so “confirming 3/12” means the same thing on your phone and on our server. Before that depth, a reorganisation can still undo the payment.
7. Network fees are real, and a failed transaction still costs them
Every chain charges a fee that goes to validators or miners, not to us. Fees vary with congestion and are unpredictable in advance. A transaction that reverts — out of gas, insufficient balance for the fee, a failing contract call — consumes the fee anyway. Holding a token on a chain whose native asset you do not hold means you cannot move that token at all.
8. Price volatility, including in “stable” assets
Crypto-asset prices move sharply and can fall to zero. Value shown in fiat is a conversion at a rate observed at a moment in time, not a price we will honour. Stablecoins are the liabilities of their issuers, not deposits: they can and have de-pegged, and an issuer can freeze balances on assets it controls, which is outside our reach entirely.
Where an invoice is priced in fiat and settled in crypto, the quote fixes the rate for a limited window. Rate movement after that window is borne by whoever the fee mode assigns it to, not absorbed by us.
9. Blockchains are public
Not asking who you are is not the same as hiding who you are, and we make only the first claim. Every address, balance and transfer is permanently visible to anyone, and chain-analysis firms link addresses routinely. This is not a privacy, anonymisation or mixing service and must not be relied on as one.
10. An anonymous merchant account cannot be recovered
A merchant account created with no email and no password has exactly one credential: the session token. There is no reset, because there is no address to send a reset to and no fact about you we could check. Losing the token loses the account and its configuration. Settled funds sit at addresses you control and are unaffected — the loss is access to the dashboard and the API, not the money.
11. There is no deposit protection
Crypto-assets are not deposits. No government guarantee scheme, deposit insurance, or investor-compensation fund applies to them or to us. We are not a bank, a broker, an exchange or a custodian, and no such scheme covers the loss of a recovery phrase.
12. Software, availability and third-party risk
The Service depends on software that can contain defects, on blockchain networks we do not operate, and on node and data providers that can fail or return wrong answers. It is provided without warranty. Outages, delayed confirmations, stale prices and mis-detected deposits are possible, and the wallet keeps working without us only to the extent your recovery phrase does — the phrase restores your funds in any standards-compliant BIP-39 wallet, whether or not this app still exists.
13. Regulatory and counterparty risk
The legal treatment of crypto-assets is unsettled and changes without notice. A rule change can make some or all of the Service unavailable where you are, can affect an asset you hold, and can reach a counterparty you rely on. Your own obligations — tax, licensing, reporting — are yours; see the acceptable-use policy and the AML and sanctions policy.
14. What we ask you to do about it
- Write the recovery phrase down offline, in more than one place, and never photograph it or store it in a password manager that syncs to a cloud.
- Test the restore on a spare device before the balance matters. An untested backup is not a backup.
- Send a small amount first on any new address or new chain.
- Hold enough of a chain’s native asset to pay the fee to move off it.