Privacy

How the Bambox Wallet looks after your information. Last updated 11 October 2026.

Who we are

The Bambox Wallet is run by 3dnative. It keeps the skill coins you earn so they stay yours after you leave your school, college or employer. Questions about your information: wallet@bambox.me.

What we keep

• Your wallet email, to sign you in. For learners under 13 this is a parent's or guardian's email. If you change it, we keep the old address so new coins still reach you.
• Your coins. Each one is a signed Open Badges 3.0 credential from the school, college or employer that validated the skill. It records the skill, the level, the date, who issued it and how it was validated. It names you by a code, not by your name or email. If you chose to add your own words about what difference it made, they are in the coin too. We also keep each coin's image.
• Your link to your learning platform: which platform sent your coins, when you claimed your wallet, and whether it is still connected.
• Your Digital Passport, if you use it: the share link, the name you show and which coins you hide.
• Security records: sign-in links and codes (stored scrambled, and they expire after 20 minutes), a log of sign-ins and changes with the IP address they came from (kept for 12 months), and short-lived counters that stop people guessing (kept for 2 days).
• Our record of connections: when your wallet is connected to or disconnected from your learning platform, we email you a confirmation and keep a copy for our records.

Cookies and tracking

We use one cookie to keep you signed in. In a browser it ends when you close the browser, after 12 hours without use, or after 7 days at most; in the Bambox Wallet app it lasts 30 days of disuse (90 days at most). While the wallet is being tested before launch, a second cookie remembers for 30 days that this browser was given the access password. Your light or dark choice and sound setting are saved in your own browser. There are no adverts, no analytics and no tracking.

Where it comes from

Your coins and wallet email come from the learning platform your school, college or employer uses. You, your parent or guardian, or your school add the email, and someone presses "Claim my wallet". Nothing is linked until the person with that inbox confirms the email we send.

Who can see it

• You, when you sign in.
• Anyone you give your Digital Passport link to: they see only the coins you chose to show.
• Anyone you give a coin to can check it is genuine. The public keys used for checking hold no personal information.
• That platform can ask whether your wallet is claimed or connected. It does not get your coins back from us.

We don't sell your information or share it with anyone else.

How long we keep it

Until you delete your wallet. Delete my wallet (Account) removes your account, coins, images, Passport and sign-in links straight away. The log of sign-ins keeps the events but loses your account and IP address. We keep a small marker that your link to your learning platform is closed, so no new coins are sent.

Our record copies of your connection emails are kept in our records mailbox. They show only part of your email address, and they are not removed when you delete your wallet. Email us and we will delete them.

Your choices

• Download my data (Account): every coin, in open formats that work without us.
• Change my email and Disconnect from your learning platform (Account).
• Delete my wallet (Account).
• To ask for a copy of your information, to correct it, or to complain, email wallet@bambox.me. You can also contact the Information Commissioner's Office at ico.org.uk.

Children

For learners under 13, the wallet uses a parent's or guardian's email, and a parent, guardian or the school claims it. The learner can't claim or disconnect it themselves.

If this page changes, the date at the top changes too.