Privacy Policy

VLTStake ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your information.

Because VLTStake is a non-custodial protocol, we have limited access to information about you compared to custodial platforms. We are designed to minimize data collection while providing a functional, secure experience.

2.1 Information You Provide

• Email address — collected during account registration for communication and authentication purposes.
• Two-factor authentication setup data — TOTP secrets stored in encrypted form; we do not store TOTP codes themselves.
• Support communications — if you contact our Help Center, we retain the content of that communication.

2.2 Wallet Address Handling

Your public wallet address (XRPL account or Stellar account) is used to associate your session with on-chain data. Public blockchain addresses are, by nature, publicly visible on the respective networks. We store your public address to display portfolio data and protocol participation status.

We never collect, store, or transmit your private keys, seed phrase, or any other sensitive wallet credentials. All cryptographic operations occur client-side on your device.

2.3 Usage Data (Analytics)

We collect anonymized usage data to improve Platform performance and user experience. This may include:

• Pages visited and features used
• Browser type and version
• Device type (desktop/mobile)
• Geographic region (country level, not precise location)
• Session duration and navigation patterns

Analytics data is aggregated and does not identify individual users. We use privacy-respecting analytics tools that comply with applicable data protection laws.

2.4 Technical Data

• IP addresses (retained for security purposes and fraud prevention)
• Log data including timestamps and error logs
• Authentication event logs

We use cookies and similar technologies to maintain your session, remember preferences, and improve your experience.

3.1 Essential Cookies

Required for the Platform to function. These include session cookies for authentication and security tokens. These cannot be disabled without affecting Platform functionality.

3.2 Preference Cookies

Store your settings such as theme preference (light/dark mode). These are stored in your browser's local storage and are not transmitted to our servers.

3.3 Analytics Cookies

Used to collect anonymized usage data as described in Section 2.3. You may opt out of analytics cookies by adjusting your browser settings.

• To authenticate your identity and manage your account session
• To display your on-chain portfolio and protocol participation data
• To send transactional emails (OTP codes, security alerts)
• To detect and prevent fraud, abuse, and security threats
• To improve Platform performance and user experience
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your information for targeted advertising.

We may share information with:

• Service providers — infrastructure, email delivery, and analytics providers operating under data processing agreements.
• Legal authorities — where required by applicable law, court order, or to protect the rights and safety of users.

We do not share wallet addresses or financial activity with third-party advertisers or data brokers.

We retain account data for as long as your account is active. Upon account deletion, we remove personally identifiable data within 30 days, except where retention is required by law or for legitimate security purposes.

On-chain data (public blockchain transactions) cannot be deleted — it is permanently recorded on the XRPL and Stellar networks by nature of those protocols.

We protect your data using:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Access controls limiting employee access to user data
• Regular security assessments of our infrastructure
• Multi-factor authentication for administrative access

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us through our Help Center.

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately.

We may update this Privacy Policy periodically. Material changes will be communicated through the Platform and our official channels. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy inquiries, contact us via our Help Center. We aim to respond to all privacy-related requests within 30 days.