# Build with consent.

Source: https://docs.privatar.app/

Privatar is a self-custodial Midnight wallet for Android and desktop Chrome with a connection SDK for application developers. Keep every permission in the user’s hands.

Integration package

```
npm install @privatar-wallet/sdk@0.1.4
```

The public SDK is available on [npm](https://www.npmjs.com/package/@privatar-wallet/sdk). It remains in preview. Read the integration guide and current security boundaries before using the examples.

The public integration package is `@privatar-wallet/sdk`. The wallet and its internal Midnight adapter are separate, private workspace packages.

[01 / WALLETA wallet you controlCreate or restore a wallet, receive assets, review transfers, and manage connected sites.Use Privatar →](https://docs.privatar.app/wallet)[02 / DEVELOPERSA deliberate connectionPair with Privatar, request specific permissions, and verify a wallet sign-in on your server.SDK quickstart →](https://docs.privatar.app/sdk)

## Three separate decisions

### Request a connection

Your site requests a network and the permissions it needs. Choose the desktop extension or mobile app. Show the actual pairing QR only for desktop-to-phone connections.

### Approve in the wallet

The user checks the site origin and requested access, then accepts or rejects in Privatar. Authenticated app invitations handle challenge verification in the background.

### Sign in explicitly

Your server issues a fresh challenge. The wallet asks for a separate signature approval. Your server verifies the response.

**Connection is not authentication.** Reading a public address does not prove control of that wallet. Create an application session only after verifying a fresh, single-use challenge.

## What is available

| Surface | Scope |
| Wallet | Creation, recovery, balances, history, receive, reviewed transfers, and DUST generation. |
| Connect SDK | Explicit pairing, scoped reads, sign-in, local contract proofs, reviewed Preview balancing and submission, and encrypted receipt recovery. |
| Proof generation | Bundled local WASM proofs completed funded Preview swaps and the contribution, recovery, creator-claim and refund lifecycle through the wallet engine. Physical phone verification is pending. |
| Mainnet | Requires application-operator provider configuration. It has not been verified with funds. |

## Try the connection flow

The local demo is a separate application with a real server-side nonce and signature check. Use a fresh test wallet.

Run the demo from the source workspace with `npm run demo`. A hosted connection demo is not available yet.

[Get the Android preview ↗](https://privatar.app/download)