Privacy

This is a demonstration build and holds its data in memory. Nothing you do here survives a restart of the server, and no personal data is stored beyond that.

What we know

• Your wallet’s identity public key. That is what a session is. It is public by nature and it is how your positions are attributed to you.
• What you have lent to, and when. Necessarily, those are the positions.
• What you post. Chat messages, case evidence and updates, attributed to your handle.
• A session cookie. One cookie holding a user id, and in this demo build a second holding a role override. Both arehttpOnly and SameSite=Lax.

What we do not know

• Your private keys. There is no code that could receive one: see security.
• Your name, address or email, unless you have gone through an identity check as a borrower.
• Anything from a tracker. This build carries no analytics, no advertising pixels and no third-party scripts beyond the font and image CDNs listed below.

Third parties

Fonts are served by Google Fonts and campaign photography by the Unsplash CDN, both of which see your IP address when your browser fetches an asset. Nothing else leaves the app.

What is public

Lending activity is public and always has been: the amount, the handle, the loan and the transaction appear in the activity feed and on the loan page. That is a design decision rather than an oversight, a lending platform whose ledger is private is asking to be taken on trust. If you do not want a position visible, do not open it.

Deleting things

Disconnecting a wallet clears your session cookies. Case evidence cannot be withdrawn once filed, because a case file that can be edited after the fact is not a record.