Privacy Policy
The short version
There are no accounts, no passwords, no email signup and no advertising pixels. We do use Google Analytics to count visits and see which pages people read — that is the one third party that receives anything about your visit. We never sell data, and nothing we collect is tied to your identity.
What we do not collect
- Your name, email address, phone number or postal address.
- Identity documents. There is no KYC on this interface.
- Private keys or seed phrases. We never ask, and you should never enter them anywhere.
- Behavioural advertising profiles. There are no ad trackers on this site, and we do not use Google Analytics data for advertising or remarketing.
- Any link between your wallet address and your analytics activity. Your wallet address is never sent to Google.
What we do process
Your wallet address
When you connect a wallet, your public address is used in the browser to read your balances and positions. We pass it to the Morpho public API to look up your loans. We do not store it in a database.
Google Analytics
We run Google Analytics 4 (measurement ID G-6HV6WRSVBH) so we can
see how many people visit and which pages are useful. Google acts as our data
processor and receives:
- Pages you view on this site, and when.
- Your approximate location (city level), derived from your IP address. GA4 truncates the IP before storing it and does not make it available to us.
- Device, browser, screen size and the referring site.
- A randomly generated identifier stored in the
_gacookie, which lets Google tell a returning visit from a new one.
We see aggregate reports only. Your wallet address is never sent to Google, and nothing in the analytics data identifies you by name.
Opting out: install Google's
opt-out browser add-on,
block googletagmanager.com with any content blocker, or clear and
block cookies for this site. The interface works normally either way.
Server logs
Our web server keeps standard request logs — IP address, timestamp, page requested, user agent — to keep the site running and defend against abuse. These are retained briefly and not combined with your wallet address.
Local storage in your browser
We store a small number of preferences on your device, such as whether you have dismissed the cookie notice. This never leaves your browser. See the Cookie Policy.
Everything you do on-chain is public
This is the part people underestimate
Blockchains are public and permanent. Your deposits, borrows, repayments and balances are visible to anyone, for ever, and we cannot delete or amend them — not for you, not for a regulator, not for ourselves. Anyone who learns your address can see your full history.
Third parties your browser talks to
| Service | What it receives | Why |
|---|---|---|
| Robinhood Chain RPC | Your IP, your address in read requests | Reading chain state, sending transactions |
| Morpho API | Your wallet address (via our server) | Looking up your positions |
| cdnjs (Cloudflare) | Your IP | Serving the ethers.js library |
| Google Fonts | Your IP | Serving webfonts |
| Your wallet | Whatever it chooses to | Signing; governed by its own policy |
Stock logos are hosted by us, so displaying the markets table does not tell any third party which stocks you looked at.
Legal basis (GDPR)
Where the GDPR applies, we rely on legitimate interests (Art. 6(1)(f)) to operate and secure the site, and on contract necessity (Art. 6(1)(b)) to provide the interface you asked for. Analytics is a separate question: the ePrivacy rules generally require consent before a non-essential cookie is set, and ours is set on page load rather than after a prompt. We would rather state that plainly than imply otherwise, and the opt-out above takes effect immediately.
Your rights
Subject to your local law you may request access to, correction of, or erasure of personal data we hold, and object to processing. In practice we hold very little, and we cannot erase anything from a public blockchain. Write to @kept_rh.
Retention
Server logs are kept for a short operational period and then discarded. We hold no user database to retain.
Children
Kept is not intended for anyone under 18 and we do not knowingly process their data.
Changes
If this policy changes, the date at the top changes with it.
Contact
Kept Labs — @kept_rh