1. What we collect
- Wallet addresses you connect, and the public on-chain activity tied to them
- Email address, if you join the waiting list or contact support
- Verification data, for regulated products only, processed by our KYC provider
- Technical logs — IP address, user agent, timestamps — for security and abuse prevention
2. What we do not collect
No private keys, no seed phrases, no third-party advertising trackers, and no cross-site profiling. The website sets no marketing cookies.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Operating the interface | Performance of a contract |
| Fraud, abuse and security | Legitimate interest |
| Regulatory verification | Legal obligation |
| Product email you asked for | Consent, withdrawable at any time |
4. Retention
Support correspondence is kept for 24 months. Verification records are kept for the period required by law. Technical logs are rotated after 90 days.
5. Your rights
Access, correction, deletion, portability and objection. Email privacy@loaf.com and we respond within 30 days. Blockchain records cannot be deleted — that is a property of the network, not a policy choice.
6. Processors
We use third parties for hosting, email delivery, error monitoring and KYC. Each is bound by a data processing agreement and listed on request.
Template document. This page is a plain-language summary written for the
website. Have counsel review and adapt it before you rely on it in a live product.