lodestarPrivacy Policy
LAST UPDATED 25 AUGUST 2026
We do not have an account system, we do not use analytics, and we do not set advertising or tracking cookies. We do not ask for your name, email or any identity document to use the app. What follows is an honest account of the little that is processed anyway.
1. Who is responsible
The Lodestar project, established in and operating from Switzerland, operates the website and application at lodestarprotocol.xyz (the “Interface”). Details of the operating entity are available to a competent authority on request. Contact: privacy@lodestarprotocol.xyz.
2. What we do not do
- No accounts, no registration, no passwords.
- No analytics, no advertising pixels, no session recording, no fingerprinting.
- No advertising or tracking cookies. We do not sell or rent data to anyone.
- No collection of your name, address, email, phone number or identity documents.
3. What is stored on your own device
The Interface uses your browser's local storage. This data stays on your device, is never transmitted to us, and you can clear it at any time through your browser settings.
| Key | What it holds | Why |
|---|---|---|
lode_theme | light or dark | Remembers your display preference |
lode_xrpl_addr | An XRPL address you enter | Saves retyping it when borrowing from XRPL |
| Loan cache | Loan IDs you have already viewed | Avoids re-scanning the chain on every page load |
4. What third parties necessarily see
This is the part most privacy policies leave out. Using a web application at all reveals some information to infrastructure providers we rely on. We do not control what they retain.
- Hosting (Cloudflare). Serving the page discloses your IP address, approximate location, browser and requested URL to our hosting provider, and these appear in standard server logs used for delivery and abuse prevention.
- RPC and node providers. Reading chain data and broadcasting transactions sends your IP address, and in some calls your wallet address, to the RPC endpoint in use. If you prefer, you can point your wallet at your own node.
- Google Fonts. The Interface currently loads typefaces from
fonts.gstatic.com, which discloses your IP address to Google. We intend to self-host these files to remove that disclosure. - Your wallet provider. Your wallet software has its own privacy policy and its own telemetry, which is outside our control.
5. Blockchain data is public and permanent
Transactions you sign are recorded on the Flare network. That record is public, permanent and outside anyone's control, including ours. Your wallet address, balances, loans and transaction history can be read by anyone and can potentially be linked to your identity by third-party analytics.
We cannot edit, delete, anonymise or restrict blockchain data. If you exercise a right to erasure against us, it cannot extend to the blockchain, because we neither control nor operate it.
6. Legal bases and purposes
Where data protection law applies, the limited processing described above rests on our legitimate interest in operating a secure, functioning website and preventing abuse. We do not process special categories of personal data and we do not carry out automated decision-making that produces legal effects.
7. Retention
We keep no user database. Server logs held by our hosting provider are retained for a short period for security and delivery purposes, in accordance with that provider's own policy.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC).
In practice we hold almost nothing capable of identifying you, so in most cases the honest answer to an access request will be that we have no data about you. Write to privacy@lodestarprotocol.xyz and we will respond.
9. International transfers
Our hosting and RPC providers operate globally, so the technical data described in section 4 may be processed outside Switzerland, including in countries whose data protection laws differ from your own.
10. Children
The Interface is not directed at, and must not be used by, anyone under the age of majority in their jurisdiction.
11. Changes
We may update this policy. The version in force is the one published here, and the date at the top reflects the last change.