Is Phantom safe? What its own terms say

Phantom is not a custodian of your Wallet or the Digital Assets held in your Wallet. Phantom does not have the power to make any transactions on your behalf. You are responsible for the acts and omissions of any person who accesses your Wallet or any feature provided through the Site.

Because your keys never leave your device, no one, including Phantom, can access or move your funds without them.

When you create a wallet using Apple or Google account, your wallet still has a recovery phrase. Phantom encrypts it, and the encryption key is split into two parts: One part is held by Phantom. The other part is stored across the decentralized Juicebox network. No single party, not even Phantom, can decrypt your wallet without your email and PIN.

Wallets created with a Google or Apple account are powered by Phantom KMS. KMS stores your wallet keys in secure enclaves rather than on your device. Because the private key never leaves the enclave environment, the Show Private Key option is not available for these accounts. This is expected behavior.

You acknowledge and understand that, in certain circumstances, such as if you lose or forget your password for your Wallet or if you lose access to your mobile device, you will either need to use your private key, secret recovery phrase will need to authenticate by using login credentials used to create your wallet such as your email password and pin, or any other authentication method Phantom may enable

from the App user interface, swap assets on a peer-to-peer basis pursuant to quotes provided by independent professional market makers (“Market Makers”) or via third-party Dapps (“Swapper”)

You understand and acknowledge that to improve execution quality and/or user experience, Phantom has entered into arrangements with one or more third parties, including searchers and validators (collectively “Partners”), and Partners may share fees they earn from these arrangements with Phantom, including, but not limited to, fees from price movements, arbitrage opportunities, priority execution, improvements in price execution, the fulfillment of limit orders, and priority transaction processing.

Some Partners may be provided the opportunity to have the exclusive right to, as applicable, bundle and submit the transactions you have entered into using the Functionality. You further understand and acknowledge that Phantom may enter into arrangements with one or more Market Makers allowing them to submit quotes to you with quoted prices via the Swapper interface. If you choose to execute your transaction with a Market Maker, you further acknowledge and understand that Phantom may receive a fee from the Market Maker with which you choose to execute your transaction.

Buy lets you purchase tokens in Phantom using a debit card, Apple Pay, PayPal, or a bank transfer. Your purchase is handled by a third-party provider such as MoonPay, Topper, or Banxa, not by Phantom. The provider is the one that delivers the tokens to your wallet.

If a provider blocks your account, the restriction comes from their compliance team. Phantom cannot see why you were blocked or unblock your account. Contact the provider's support team directly.

If you choose to use certain opt-in Functionality, our third-party service providers may process your Know Your Customer (KYC) information on our behalf. This information includes your legal name, date of birth, Social Security number, government-issued identification, contact information, and biometric data. Our service providers collect and process biometric data on our behalf; we do not have access to biometric data.

If you use Phantom Cash or other payment features, we collect the last four digits of your bank account number and the last four digits of your payment card(s) to enable you to identify and select between payment methods and to detect and prevent fraud. We also collect payment method type and brand (such as through our third-party onramp integrations) to diagnose payment failures. We work with a third-party payment processor to enable these features and that third party collects and processes your payment account information.

Your access to and use of the Site or Functionality may be suspended at any time, for any reason, in our sole and absolute discretion, without incurring liability of any kind to you as a result of such suspension or termination.

We may terminate this Agreement and/or your access to and use of the Site and Functionality, in our sole discretion, at any time and without notice to you.

Phantom does not have the ability to freeze, cancel, or otherwise modify any transaction that you execute through a Third Party Functionality.

The following networks are currently supported: * Solana * Ethereum * Robinhood Chain * Arc * HyperEVM * Bitcoin (Native Segwit/Taproot) * Base * Polygon

IN NO EVENT SHALL THE PHANTOM PARTIES’ TOTAL LIABILITY TO YOU FOR ALL DAMAGES (OTHER THAN AS MAY BE REQUIRED BY APPLICABLE LAW IN CASES INVOLVING PERSONAL INJURY) EXCEED THE AMOUNT OF ONE HUNDRED U.S. DOLLARS ($USD100.00) OR ITS EQUIVALENT IN THE LOCAL CURRENCY OF THE APPLICABLE JURISDICTION.

Any notices or other communications provided by us under these Terms, including those regarding modifications to these Terms, will be given by posting to the Site and/or through other electronic communication.

you may not use the Site or download the App or use the Functionality if (i) you are in, under the control of, or a national or resident of Cuba, Iran, North Korea, Sudan, or Russian-occupied regions of Donetsk, Luhansk or Crimea, or any other jurisdiction subject to comprehensive United States embargo, UN Security Council Resolutions, HM Treasury’s financial or other sanctions regime, or if you are on the U.S. Treasury Department’s Specially Designated Nationals List or the U.S. Commerce Department’s Denied Persons List, Unverified List, Entity List HM Treasury’s financial or other sanctions regime

Functionalities and supported Digital Assets may vary by jurisdiction.

Your IP address, which we process, temporarily store and/or pass to third party partners to the extent necessary to protect the security of our Functionality and prevent DDoS attacks, derive your approximate location (such as state or country), establish a network connection between your device and our Functionality (which is required to provide the Functionality), or comply with legal obligations (such as adherence to applicable Sanctions).

We may associate your wallet address(es) with your account identifiers, such as your email address or username, to enable customer support, fraud detection, and to provide consistent experience across features. You may opt out of this association in your in-app settings; note that opt out may limit certain support and fraud-protection capabilities.

On our trading terminal, session replay data (including clicks and navigation) to improve the product and diagnose issues. Sensitive fields, including financial inputs, are masked and not recorded.