Back to home

Privacy Policy

Last updated: May 20, 2026

1. Introduction

Spiral Stake (“we,” “our,” or “us”) operates the website at spiralstake.xyz and the application at app.spiralstake.xyz (collectively, the “Interface”). This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

Because Spiral Stake is a non-custodial decentralized protocol, we do not collect or store private keys, seed phrases, or digital assets. Blockchain transactions are public by nature — any interaction you make with the Spiral Stake smart contracts is permanently recorded on the public blockchain and is outside our control.

2. Information We Collect

2.1 Information You Do Not Provide

We do not require you to create an account, provide an email address, or submit any personally identifiable information to use the Interface. We do not collect or have access to your private keys or wallet seed phrases.

2.2 Automatically Collected Information

When you visit the Interface, our servers and third-party analytics tools may automatically collect:

  • Log data: IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps.
  • Device information: Device type, screen resolution, and language settings.
  • Usage data: Features interacted with, navigation paths, and session duration.

2.3 Wallet Addresses

When you connect a wallet to the Interface, your public wallet address is visible to us. This is a public blockchain identifier and is not inherently personally identifiable, but it may be combined with on-chain data to infer behavioral patterns. We do not link wallet addresses to real-world identities.

2.4 Blockchain Data

All transactions submitted through Spiral Stake are recorded on public blockchains. This data — including wallet addresses, transaction amounts, strategy types, and fees paid — is permanently public and not within our control to delete or modify.

3. How We Use Your Information

We use automatically collected information to:

  • Operate, maintain, and improve the Interface.
  • Understand how users interact with the Interface and identify areas for improvement.
  • Detect, investigate, and prevent fraudulent activity, abuse, or access from prohibited jurisdictions.
  • Comply with applicable legal obligations, including sanctions screening.

We do not sell your information to third parties or use it for targeted advertising.

4. Cookies and Tracking Technologies

The Interface may use cookies, local storage, and similar technologies to:

  • Remember your wallet connection preferences.
  • Measure usage patterns via privacy-respecting analytics (e.g., aggregated, anonymized page views).
  • Ensure correct rendering and functionality across sessions.

You can control or disable cookies through your browser settings. Disabling cookies may affect some functionality of the Interface.

5. Third-Party Services

The Interface may integrate with or link to third-party services, including:

  • Morpho Blue:The underlying lending protocol. Interactions are on-chain and governed by Morpho’s own terms.
  • Swap aggregators: Third-party routing for flash-loan swaps. These services may collect their own usage data.
  • RPC providers: Your wallet may connect to third-party RPC nodes that log request metadata including your IP and wallet address.
  • Analytics providers: We may use privacy-focused analytics tools. We do not share individually identifiable data with analytics providers.

We are not responsible for the privacy practices of these third-party services.

6. Sanctions Screening and Geo-Restrictions

To comply with applicable law, the Interface may use your IP address and other signals to determine whether you are accessing from a prohibited jurisdiction or are on a sanctions list. Users from restricted jurisdictions may be blocked from accessing the Interface. This process may involve third-party compliance services. IP addresses used for screening are not retained longer than necessary for this purpose.

7. Data Retention

We retain automatically collected log data for a limited period (typically 90 days or less) for security and operational purposes, unless a longer period is required by law. Aggregated, anonymized analytics data may be retained indefinitely.

Blockchain transaction data is permanently public and cannot be deleted by us or anyone else.

8. Security

We implement reasonable technical and organizational measures to protect collected data against unauthorized access, loss, or alteration. However, no system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored on our systems.

Your primary security responsibility is the safeguarding of your own private keys and wallet credentials. Spiral Stake will never ask for your private key or seed phrase.

9. Children's Privacy

The Interface is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will take appropriate steps to delete it.

10. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of data we hold (subject to legal retention obligations).
  • Object to or restrict certain processing.
  • Lodge a complaint with your local data protection authority.

Note that on-chain blockchain data cannot be deleted, modified, or restricted — it is inherently public and permanent.

11. International Data Transfers

Information collected may be processed in countries other than your country of residence. By using the Interface, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top reflects when changes were last made. Continued use of the Interface after changes constitutes acceptance of the revised policy. Material changes will be announced through our official channels.

13. Contact

For privacy-related questions or requests, reach us via X / Twitter or Telegram.