Privacy Policy
The short version
There are no accounts, no passwords, no email signup, no advertising pixels and no third-party analytics. We do not sell data because we do not collect data worth selling.
What we do not collect
- Your name, email address, phone number or postal address.
- Identity documents. There is no KYC on this interface.
- Private keys or seed phrases. We never ask, and you should never enter them anywhere.
- Behavioural advertising profiles. There are no ad trackers on this site.
What we do process
Your wallet address
When you connect a wallet, your public address is used in the browser to read your balances and positions. We pass it to the Morpho public API to look up your loans. We do not store it in a database.
Server logs
Our web server keeps standard request logs — IP address, timestamp, page requested, user agent — to keep the site running and defend against abuse. These are retained briefly and not combined with your wallet address.
Local storage in your browser
We store a small number of preferences on your device, such as whether you have dismissed the cookie notice. This never leaves your browser. See the Cookie Policy.
Everything you do on-chain is public
This is the part people underestimate
Blockchains are public and permanent. Your deposits, borrows, repayments and balances are visible to anyone, for ever, and we cannot delete or amend them — not for you, not for a regulator, not for ourselves. Anyone who learns your address can see your full history.
Third parties your browser talks to
| Service | What it receives | Why |
|---|---|---|
| Robinhood Chain RPC | Your IP, your address in read requests | Reading chain state, sending transactions |
| Morpho API | Your wallet address (via our server) | Looking up your positions |
| cdnjs (Cloudflare) | Your IP | Serving the ethers.js library |
| Google Fonts | Your IP | Serving webfonts |
| Your wallet | Whatever it chooses to | Signing; governed by its own policy |
Stock logos are hosted by us, so displaying the markets table does not tell any third party which stocks you looked at.
Legal basis (GDPR)
Where the GDPR applies, we rely on legitimate interests (Art. 6(1)(f)) to operate and secure the site, and on contract necessity (Art. 6(1)(b)) to provide the interface you asked for. We do not rely on consent for tracking because we do not track.
Your rights
Subject to your local law you may request access to, correction of, or erasure of personal data we hold, and object to processing. In practice we hold very little, and we cannot erase anything from a public blockchain. Write to hello@kept.markets.
Retention
Server logs are kept for a short operational period and then discarded. We hold no user database to retain.
Children
Kept is not intended for anyone under 18 and we do not knowingly process their data.
Changes
If this policy changes, the date at the top changes with it.
Contact
Kept Labs — hello@kept.markets