Kept
Legal

Privacy Policy

The short version

There are no accounts, no passwords, no email signup and no advertising pixels. We do use Google Analytics to count visits and see which pages people read — that is the one third party that receives anything about your visit. We never sell data, and nothing we collect is tied to your identity.

What we do not collect

  • Your name, email address, phone number or postal address.
  • Identity documents. There is no KYC on this interface.
  • Private keys or seed phrases. We never ask, and you should never enter them anywhere.
  • Behavioural advertising profiles. There are no ad trackers on this site, and we do not use Google Analytics data for advertising or remarketing.
  • Any link between your wallet address and your analytics activity. Your wallet address is never sent to Google.

What we do process

Your wallet address

When you connect a wallet, your public address is used in the browser to read your balances and positions. We pass it to the Morpho public API to look up your loans. We do not store it in a database.

Google Analytics

We run Google Analytics 4 (measurement ID G-6HV6WRSVBH) so we can see how many people visit and which pages are useful. Google acts as our data processor and receives:

  • Pages you view on this site, and when.
  • Your approximate location (city level), derived from your IP address. GA4 truncates the IP before storing it and does not make it available to us.
  • Device, browser, screen size and the referring site.
  • A randomly generated identifier stored in the _ga cookie, which lets Google tell a returning visit from a new one.

We see aggregate reports only. Your wallet address is never sent to Google, and nothing in the analytics data identifies you by name.

Opting out: install Google's opt-out browser add-on, block googletagmanager.com with any content blocker, or clear and block cookies for this site. The interface works normally either way.

Server logs

Our web server keeps standard request logs — IP address, timestamp, page requested, user agent — to keep the site running and defend against abuse. These are retained briefly and not combined with your wallet address.

Local storage in your browser

We store a small number of preferences on your device, such as whether you have dismissed the cookie notice. This never leaves your browser. See the Cookie Policy.

Everything you do on-chain is public

This is the part people underestimate

Blockchains are public and permanent. Your deposits, borrows, repayments and balances are visible to anyone, for ever, and we cannot delete or amend them — not for you, not for a regulator, not for ourselves. Anyone who learns your address can see your full history.

Third parties your browser talks to

ServiceWhat it receivesWhy
Robinhood Chain RPCYour IP, your address in read requestsReading chain state, sending transactions
Morpho APIYour wallet address (via our server)Looking up your positions
cdnjs (Cloudflare)Your IPServing the ethers.js library
Google FontsYour IPServing webfonts
Your walletWhatever it chooses toSigning; governed by its own policy

Stock logos are hosted by us, so displaying the markets table does not tell any third party which stocks you looked at.

Legal basis (GDPR)

Where the GDPR applies, we rely on legitimate interests (Art. 6(1)(f)) to operate and secure the site, and on contract necessity (Art. 6(1)(b)) to provide the interface you asked for. Analytics is a separate question: the ePrivacy rules generally require consent before a non-essential cookie is set, and ours is set on page load rather than after a prompt. We would rather state that plainly than imply otherwise, and the opt-out above takes effect immediately.

Your rights

Subject to your local law you may request access to, correction of, or erasure of personal data we hold, and object to processing. In practice we hold very little, and we cannot erase anything from a public blockchain. Write to @kept_rh.

Retention

Server logs are kept for a short operational period and then discarded. We hold no user database to retain.

Children

Kept is not intended for anyone under 18 and we do not knowingly process their data.

Changes

If this policy changes, the date at the top changes with it.

Contact

Kept Labs — @kept_rh