Short answers

A vault on Ethereum for your own funds. Every move needs your normal wallet key and a one-time hash-based key made on your device, which quantum computers cannot forge. No owner, admin or server can touch or block it.

No. Only your keys can move them. No contract has an admin, a pause or an upgrade, and no server is in the path of any action, exit or recovery.

Nothing changes for your vault. It is a contract on Ethereum; the app needs only a public Ethereum connection and your gas. The exit page can be saved and run from your own computer.

Your vault first records on Ethereum exactly what the next one-time key may sign, and the app waits until that record is final, about eight minutes, before it signs. That wait is what keeps each one-time key to a single signature. A faster setting exists for small amounts.

1,000 WINTER to create a vault and 50 WINTER per protected action, fixed in WINTER forever, plus Ethereum gas (about $0.24 per action at today's gas). Exits and recovery never cost a WINTER fee. Until WINTER launches, vaults and actions are free. Half of every fee is burned and half is added to the public canary bounty. See pricing.

No. The app can pay with ETH and converts it in the same step. Paying with ETH includes a 20% convenience premium: the app buys 20% more tokens than you need, and the extra is half burned and half added to the canary bounty. If you already hold WINTER, you can pay with them directly, with no premium.

Send your funds out with an ordinary action, or evacuate everything to the exit address you chose at the start, fee-free. If you cannot make normal actions at all, start the escape: seven days later the vault works without the per-action record. None of these need anyone's help.

Your recovery kit and its passphrase, or your master seed, restore your keys on a new device, and the vault tells the app which one-time keys are used. If you lost all of those but kept your recovery key, recovery hands the vault to new keys after 30 days. Without any of them, nobody can move the vault, ever.

No. Protection covers what you hold in your Wintergate vault, not your other wallets and not the tokens themselves. Move what you want protected into the vault.

A public bounty for anyone who can break the cryptography protecting today's wallets. It sits on a key made by hashing, so its private key never existed, and half of every fee grows it. Claiming it is a public alarm. The canary. It is a detector with limits: an attacker does not have to claim it.

The fee the vault contract charges for a protected action. It is not part of the cryptography, not an investment and not needed to leave. Read the token page and the risk disclosures.

The contracts have been through repeated internal adversarial review rounds, and the core wallet design through several more before that. Whether an independent firm has reviewed the launch version will be stated on this site before the app opens. Read the risks that remain.

Business and Enterprise packages are coming soon. Personal protection comes first.

The help page walks through the common problems. If a security issue is ever found, it is posted on the security notices page.