# Security & Privacy — Clear Boundaries

> Read QBitcoin’s non-custodial security architecture, tool limitations, public-data privacy considerations and wallet-secret handling rules.

QBitcoin key tools have no independent security audit and must not be used with real funds.

The architecture requires on-device key generation and signing. No seed phrases or private keys may reach the backend, telemetry, logs, PostgreSQL or Redis. Broadcast must be explicitly authorized after transaction review. Public address and extended-public-key data can have privacy implications. Content pages have no secret-entry forms. Dedicated local tool forms keep secrets on-device. There are no analytics or external scripts; fonts are local. Independent cryptographic review remains required before use with real funds.

[Security model](https://qbitcoin.live/security/index.md) · [QBitcoin home](https://qbitcoin.live/index.md)