In short
- We only keep your wallet address, your acceptance of the terms and your swaps.
- Data is hosted in the EU.
- No advertising cookies, no trackers.
- You can ask us to erase your data at any time.
01
What we keep
Kurate has no accounts, and we never ask for your name, email, phone number or an identity document. The controller of the data below is [Legal entity name], [registered office address]; write to paulunemoon@gmail.com for anything about it.
| Data | Why | Kept for |
|---|---|---|
| Wallet address | Identifies you in our records | 5 years after your last use |
| Terms signature | Proves you accepted the terms | 5 years after your last use |
| Swap history | Shows your swaps, support | 5 years from the swap |
A wallet address is pseudonymous but can be linked to you, so we treat it as personal data. Your deposits, loans and swaps are also recorded on the Solana blockchain, which is public and permanent: we do not control that data and cannot change or delete it.
02
Where it is hosted
The website and the app are hosted by Vercel, and our database by Supabase. Both are configured to store and process data in the European Union, in Frankfurt.
- VercelEU region
Hosting of the website and the app, and cookieless audience measurement.
- SupabaseEU region
Database storing the wallet addresses, signatures and swaps listed above.
03
Service providers
Two more providers process data on our behalf when you use the app. Where any provider is based outside the European Union, notably in the United States, transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
- HeliusProcessor
Solana RPC: your wallet address and transactions pass through it to reach the network.
- LI.FIProcessor
Swap routing: receives your wallet address, the tokens and the amounts of a quote.
04
How long we keep it
Your wallet address and terms signature are kept as long as you use the app, then five years from your last use — the period during which a contractual claim can be brought. Each swap record is kept five years from the swap. Technical logs are kept no more than 30 days.
We process this data to perform the contract you accept when you sign the terms, to meet our legal obligations (sanctions among them), and in our legitimate interest in keeping the app secure and being able to establish or defend a legal claim. At the end of these periods the data is deleted or irreversibly anonymised.
05
Your rights
Under the GDPR you can, at any time and from anywhere, ask us to:
- Give you access to your data, or a copy of it in a portable format.
- Correct it, or restrict or object to how we process it.
- Erase it: your wallet address, signature and swap records are removed from our database. We may keep the minimum needed for a legal claim or obligation, and erasure cannot reach the blockchain.
Write to us from anywhere and prove you control the wallet by signing a message we send you. We answer within one month. You can also complain to your data protection authority — in France, the CNIL (cnil.fr).
Still have a question?
The team reads every message and answers in person.