Privacy Policy

CloakForge is designed with a privacy-first, non-custodial architecture. We aim to minimize data processing and avoid intentional collection of personal data wherever reasonably possible.

• • We do not create user accounts or user profiles
• • We do not intentionally collect names, phone numbers, postal addresses, or similar direct identifiers
• • We do not use analytics, advertising trackers, profiling tools, or behavioral advertising technologies
• • We do not intentionally collect private keys, seed phrases, or custody credentials

As part of the Service design, we do not intentionally collect or store the following categories of data ourselves:

• • Traditional account registration data such as usernames and passwords
• • Private keys, seed phrases, or wallet recovery materials
• • Personal profiles or identity dossiers
• • Advertising identifiers or analytics-based behavioral histories
• • KYC materials or identity verification documents

Although we do not intentionally collect personal data for business profiling purposes, certain technical data may still be processed automatically in the ordinary operation of the internet and supporting infrastructure.

• • Hosting, CDN, security, or deployment providers may process IP addresses, request headers, timestamps, and similar technical request data
• • RPC providers may process request-level metadata needed to serve blockchain queries
• • Wallet addresses may be processed transiently in-session to enable requested functionality
• • Application-level diagnostics are restricted to error-level operational logs, with sensitive identifiers (including wallet/public-key, header, and RPC endpoint fields) redacted before logging
• • Such processing may occur even if we do not actively store, profile, or associate that data with a named identity

Core product functionality is designed to run in the user's browser or wallet environment.

• • Transactions are assembled in the client-side environment
• • Transaction signing occurs in the user's wallet
• • Private keys and seed phrases remain under the user's control
• • We do not operate custody infrastructure for user assets
• • We do not intentionally maintain a server-side user activity database

Blockchain networks are public, decentralized, and transparent by design. Interactions you initiate may be permanently visible on-chain.

• • Wallet addresses and transaction data may be publicly viewable by anyone using blockchain explorers or other tools
• • Blockchain records are generally immutable and cannot be deleted by us
• • We do not control public blockchain infrastructure or third-party indexing of blockchain data
• • You are responsible for understanding the privacy implications of public blockchain usage

The Service may use browser-side storage or memory solely for functionality, continuity, or user experience.

• • User interface preferences such as theme or display settings
• • Temporary transaction-related state needed to complete a requested action
• • Session-level technical state used to operate the interface
• • Such data remains on your device unless your browser, extensions, or third-party tools transmit it elsewhere
• • You can generally remove this data by clearing browser storage or site data

We do not use cookies or similar technologies for analytics, advertising, profiling, remarketing, or cross-site behavioral tracking.

• • We do not use advertising cookies
• • We do not use analytics cookies
• • We do not use profiling or fingerprinting tools for marketing
• • If a strictly necessary technical mechanism is used to make the interface function, it is used only for that purpose

The Service depends on third-party providers that may process technical data under their own policies and legal obligations.

• • Vercel for hosting, deployment, and related infrastructure services
• • Alchemy for blockchain RPC and network communication
• • Pinata for IPFS-related file and metadata uploads
• • Contentful for CMS content management and delivery
• • Raydium APIs or related infrastructure for liquidity/pool operations where applicable
• • CoinGecko market data APIs for token/price reference data where applicable
• • Wallet providers chosen by users
• • Public blockchain networks and related infrastructure
• • Open-source libraries, SDKs, CDN resources, or security layers where applicable
• • We do not control the independent privacy practices of those third parties

Where applicable under the GDPR or similar laws, limited processing associated with operating the Service may rely on appropriate legal bases.

• • Legitimate interests, such as maintaining the security, stability, and availability of the Service
• • Technical necessity, where processing is required to deliver requested functionality
• • Compliance with legal obligations, if required by law or regulator
• • We do not rely on consent for advertising or analytics tracking because we do not use those systems

Because our infrastructure and service providers may operate internationally, limited technical data may be processed outside the European Economic Area.

• • Service providers may process technical data in the United States or other countries
• • Where applicable, such transfers may rely on contractual safeguards or other legally recognized transfer mechanisms
• • Blockchain data itself is globally distributed and not geographically confined
• • We do not control all international movement of data inherent in public blockchain infrastructure

Our retention model is intentionally minimal, but some technical data may still exist at the infrastructure level.

• • We do not intentionally maintain a user database of personal data
• • We do not intentionally store wallet histories tied to identified persons
• • Our application-level logs are intentionally limited to error diagnostics and are designed to redact sensitive fields before log persistence
• • Technical logs may exist at the level of hosting, security, RPC, or infrastructure providers under their retention practices
• • Blockchain data persists independently of us on public ledgers
• • Local browser storage persists until removed by the user or the browser environment

Depending on your location and applicable law, you may have privacy rights with respect to personal data.

• • Right to request information about whether we process your personal data
• • Right to request access, correction, deletion, or restriction where applicable
• • Right to object to certain processing where applicable
• • Right to data portability where applicable
• • Right to lodge a complaint with a supervisory authority
• • In many cases, we may be unable to provide or delete blockchain data because we do not control it

For residents of California and similar jurisdictions, we aim to apply a privacy-minimizing approach globally.

• • We do not intentionally sell personal information
• • We do not intentionally share personal information for cross-context behavioral advertising
• • We do not intentionally profile users for advertising purposes
• • Where no personal information is maintained by us, certain access or deletion requests may be limited by that fact

The Service is not directed to children and is not intended for use by minors below the age permitted under applicable law.

• • The Service is not intended for children under 13
• • The Service is generally intended only for persons who can lawfully enter binding terms in their jurisdiction
• • If you believe a minor has provided personal information to us, please contact us

We use a privacy-minimizing and non-custodial design, but no system can be guaranteed perfectly secure.

• • We do not custody private keys or user funds
• • We rely in part on third-party infrastructure and open-source components
• • You are responsible for wallet security, device security, browser hygiene, and transaction review
• • Phishing, malicious extensions, compromised devices, and user error remain material risks

We may update this Privacy Policy from time to time to reflect legal, regulatory, technical, or operational changes.

• • The updated version will be posted on this page
• • The effective date may be updated accordingly
• • Your continued use of the Service after changes become effective indicates acceptance of the updated policy to the extent permitted by law

For purposes of applicable data protection law, the operator of CloakForge may act as the data controller only to the extent we determine the purposes and means of limited processing actually performed by us.

• • Operator: [YOUR FULL LEGAL NAME / OSVČ]
• • Business Address: [FULL BUSINESS ADDRESS]
• • Location: Czech Republic
• • Contact Email: [PRIVACY EMAIL]

If you have privacy-related questions or requests, you may contact us using the details below.

• • Privacy Email: [PRIVACY EMAIL]
• • Legal Contact Email: [LEGAL EMAIL OR SAME AS ABOVE]