// LEGAL
Privacy Policy
// WHAT WE COLLECT
// ANALYTICS
What Vault Analytics Collects
Vault operates first-party analytics to understand how visitors use the website and application. These analytics use randomly generated anonymous identifiers stored in your browser - they are never derived from your wallet address and never identify you personally.
Analytics events record behavior such as:
Pages visited and how visitors arrived (referrer, search engine, campaign links) and engagement with campaign pages and contribution flows. When a contribution or campaign creation is confirmed on-chain, analytics may associate that public on-chain activity with an anonymous session.
What Vault Analytics Never Collects
Vault analytics do not receive wallet addresses, private keys or seed phrases, email addresses, Telegram identities, authentication tokens, or contribution amounts, and payloads are filtered to remove these before they are stored or shared. Analytics run by default; you can opt out by blocking cookies and local storage in your browser or by using a tracking-protection extension.
Third-Party Analytics Providers
Google Analytics 4 (Google LLC). Vault uses a Google Analytics 4 measurement tag to aggregate the anonymous behavior data described above. Google sets cookies and processes this data under its own terms; no wallet or contact data is sent to Google.
Cloudflare (Cloudflare, Inc.). The hosting and DNS infrastructure for vault.ky provides network-level aggregate analytics (request counts, security events) as part of serving the website.
GitBook (GitBook, Inc.). The Vault documentation site (docs.vault.ky) is hosted by GitBook, whose platform analytics are governed by GitBook policies.
Analytics Retention
Raw analytics events are retained for up to 90 days and then deleted; aggregate counts are retained long-term. Short-lived records linking an anonymous session to a completed contribution or campaign creation are retained for 7 days.
// DATA ON-CHAIN AND STORED
On-Chain Data Is Public and Permanent
Any data written to the Solana blockchain - wallet addresses, contribution amounts, timestamps, campaign parameters - is public and permanently recorded. Vault cannot edit, hide, or delete on-chain data. This is a property of public blockchains, not a Vault policy choice.
When you contribute through the Vault app, your wallet address, amount, and transaction timestamp are written on-chain and visible to anyone with access to the Solana network - block explorers, node operators, and any third-party service that reads the chain.
We can act on off-chain data deletion requests (see Section 6), but we cannot alter or delete on-chain records. Understand this before interacting with any blockchain-based platform.
Wallet Addresses
Your Solana wallet address is associated with any on-chain action you take through Vault. We store wallet addresses in our off-chain database to track contributions and refund eligibility. We do not attempt to link wallet addresses to real-world identities and do not collect your name or email as part of standard platform use.
If you submit a campaign request, you provide contact handles and project details. They are used to review and manage the request and are not published, though internal review notifications are sent through Telegram. Campaign names, descriptions, images and fulfillment proof may be published on Vault’s website and social channels.
IP Address & Technical Data
We use IP addresses and browser information for abuse detection and platform security, including admin sessions, partner API access and standard server logs. We do not use IP addresses for advertising.
// SERVICE PROVIDERS
Service Providers
Vault may use service providers to support hosting, security, communications, platform operation, and other necessary business functions. These providers may process limited information on Vault’s behalf as necessary to provide those services.
Providers include hosting, database and file storage, content delivery, blockchain RPC, messaging (Telegram), analytics (Google), and an AI service that helps draft announcements from public campaign information. Vault does not sell personal information.
Displaying a campaign may load public project or token data from third-party sources. Where your browser requests that data directly, the relevant provider’s own privacy policy applies to that request.
// YOUR RIGHTS, LIMITS & CHANGES
Your Rights & Data Requests
Depending on your jurisdiction, you may have rights to access, correct, or request deletion of off-chain data we hold associated with your wallet address or campaign request. To submit a data request, email us at [email protected] from the wallet or contact details associated with the request.
Exercising off-chain data rights does not affect on-chain records. We can delete or correct data in our database; we cannot alter Solana blockchain records.
Limits of Our Ability to Act
Because Vault operates on a public blockchain, some protections available in traditional web services do not apply:
- We cannot delete or modify on-chain transaction data.
- We cannot prevent third parties from reading on-chain data - it is public by design.
- We cannot unlink a wallet address from its on-chain history.
- We cannot guarantee that third-party explorers or data services have not already replicated on-chain data.
If blockchain privacy is a concern, consider whether interacting with any public blockchain service is appropriate for your situation before using Vault. You are responsible for how you use your wallet and for any information you link to it. To the fullest extent permitted by law, Vault is not liable for inferences drawn from public blockchain data or for the independent practices of third-party analytics and infrastructure providers.
Controller, Basis, Retention & Transfers
Vault Tech LLC is the controller of the data described here; contact [email protected]. We process data to operate the platform and fulfill campaigns, to keep it secure and prevent abuse, and to understand usage (on the basis of our legitimate interests, or consent where the law requires it).
Campaign requests and contact details are kept while needed to administer the campaign and meet legal obligations; security logs and admin session records are kept for a limited period. Providers may process data in the United States and other countries, with transfers made under the safeguards the law requires. Vault is not intended for anyone under 18.
You may request access, correction, deletion or portability, and may withdraw consent, using the contact above. If you are in the EU or UK you may also complain to your local data-protection authority. California residents have the corresponding access, deletion and correction rights; Vault does not sell or share personal information for advertising.
Changes to This Policy
We may update this policy from time to time. Material changes will be reflected in an updated effective date. Continued use of Vault after changes are posted constitutes acceptance.
// Related Documents
Read alongside this
These documents describe one system and are intended to be read together. Where a plain-language summary and a legal document differ, the legal document controls.
- Terms of Service - The agreement governing your use of Vault.
- Fee Schedule - Every fee Vault charges and when it applies.
- Risk Disclosure - The funding, technical and fulfillment risks of contributing.
- Restricted Regions - Where Vault is unavailable and the eligibility you confirm.
- Trust & Security - Official domains, custody, audit status and how to report abuse.
// NEXT STEP
See how your funds are protected, not just your data.