Cookie Policy

This policy explains which technologies store information on your device, or read information already stored there, when you use stake-only.org. It should be read together with the Terms and Conditions and the Privacy Policy.

1. Scope of this policy

This policy applies to the Stake-Only website, its interfaces and the features accessible through them, operated by Kcalb Ltd.

It covers conventional browser cookies and other storage technologies that fall under the same rules, including browser storage and session storage. It does not cover technologies used independently by a third-party website after you leave Stake-Only, or data recorded on a public blockchain.

2. Legal framework

For users in the United Kingdom, storing information on terminal equipment, or gaining access to information already stored, is governed principally by the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended.

Where the information concerned is personal data, the UK General Data Protection Regulation and the Data Protection Act 2018 also apply, and the Privacy Policy describes that processing in more detail.

These rules are not limited to cookies. They apply to any technology that writes to, or reads from, the device of a visitor, whatever it is called.

3. What these technologies are

A cookie is a small item of information that a website asks the browser to store and to send back on subsequent requests. Cookies may be temporary, ending with the browsing session, or persistent, remaining until they expire or are deleted.

Browser storage keeps information in the browser without sending it automatically with each request. Local storage persists between visits. Session storage is limited to a single browser tab and is discarded when that tab is closed.

A first-party technology is set by the site being visited. A third-party technology is set by another domain. Stake-Only uses first-party technologies, together with security technologies applied by the content delivery network that serves the site.

In this policy these mechanisms are referred to together as storage technologies.

4. Technologies in use

The table below summarises the storage technologies identified on Stake-Only at the effective date of this policy. Each entry is described in more detail in the sections that follow.

FunctionCategoryDuration
Authenticated sessionStrictly necessaryUntil expiry or sign-out
Returning visitor recognitionStrictly necessaryUntil expiry or sign-out
Language preferencePreferenceUntil changed or cleared
Currency preferencePreferenceUntil changed or cleared
Display themePreferenceUntil changed or cleared
Temporary interface stateStrictly necessaryEnds with the browser tab
Delivery network securityStrictly necessarySet by the provider

No database storage in the browser was identified. No advertising technology, behavioural analytics tool, tracking pixel or social tracking script was identified in the configuration examined.

5. Authenticated session

Stake-Only does not use passwords. Access to Account and Loyalty Program functionality is obtained by connecting a compatible blockchain wallet and signing a message that proves control of the address.

Once that signature is verified, an authenticated session is opened. Because each page request is independent, the session has to be recognised on every subsequent request, which requires an identifier to be stored in the browser.

That identifier is configured so that it cannot be read by scripts running in the page, so that it is transmitted only over an encrypted connection, and so that it is not sent when a request comes from another website. These settings limit the risk of the session being intercepted or misused.

The identifier is meaningless outside Stake-Only. It is used solely to recognise an open session and to protect it. It is not used to observe browsing, to build a profile or for any advertising purpose.

The session ends when it expires, when you sign out, when you disconnect your wallet, or when you clear the stored data through your browser.

6. Returning visitor recognition

There is no separate “remember me” item. A returning visitor is recognised only while the authenticated session described in section 5 is still valid, which is at most 24 hours after the wallet signature. After that, the wallet connection and the signature are requested again.

The browser also keeps a marker noting that an account session was open, so that the Account page starts loading sooner on the next visit. It contains no identifier, is not used for advertising, cross-site tracking or profiling, and is deleted as soon as the Account page finds no open session, or when browser data is cleared.

7. Interface preferences

Stake-Only is available in several languages, allows values to be displayed in a chosen currency, and offers a light and a dark theme. Each of these selections is recorded in the browser so that the interface matches your choice without asking again on every visit.

The language preference stores only the language you selected. The currency preference stores only the display unit you selected; it does not change the nature of any cryptoasset, and a fiat-equivalent figure shown on the site remains indicative and creates no entitlement in that currency. The theme preference stores only whether you chose the light or the dark interface.

None of these values contains an identifier, and none is used for advertising, cross-site tracking or profiling. Each can be changed at any time using the corresponding control in the interface.

8. Temporary interface state

A small amount of short-lived technical information may be kept for the duration of a single browser tab. It records, for example, that a wallet session has ended so that the interface displays the correct state, or that a technical recovery step has already been performed so that it is not repeated.

This information is limited to the tab in which it was created and is discarded when that tab is closed. It contains no identifier and is not used for any purpose beyond the correct operation of the interface during that visit.

9. Delivery network security

Stake-Only is served through a content delivery network, which protects the site against attacks, filters malicious traffic and improves availability.

That provider may set its own security cookies when a visitor requests a page. These are applied at network level, before the request reaches the Stake-Only application, and are governed by the provider's own policies. They serve security and integrity purposes and are not used by Kcalb Ltd for advertising or analytics.

10. Duration and deletion

Preference values remain in the browser until you change the corresponding setting, until the site replaces them, or until you clear the stored data. They are not given a fixed expiry date, because a display preference is only useful for as long as you want it.

Temporary interface state ends with the browser tab.

Authentication items expire on the date set when they are issued, and are removed earlier if you sign out or clear your browser data.

Security items applied by the delivery network follow that provider's own retention rules.

None of these items is used to follow a visitor across unrelated websites or across devices.

11. No advertising, tracking or profiling

At the effective date of this policy, Stake-Only does not use storage technologies for advertising, retargeting, cross-site measurement or behavioural profiling.

In particular, the site does not serve personalised advertising, does not track visitors across unrelated websites, does not build a commercial profile from browsing behaviour, does not measure advertising campaigns, does not sell browsing information, and does not allow an advertising network to observe its visitors.

If an analytics, advertising or social tracking technology were introduced in future, it would be assessed before deployment and would not be activated where the law requires consent that has not been obtained.

12. Consent and exemptions

The law does not require prior consent for every form of storage. An exemption applies where storage or access is strictly necessary to provide a service that the user has requested.

The authenticated session, which is also what recognises a returning visitor while it is valid, and the marker described in section 6 exist only to open and maintain the access you request when you connect a wallet. The requested functionality cannot be delivered without recognising the session, and Kcalb Ltd relies on the strictly necessary exemption for them.

The temporary interface state and the security items applied by the delivery network are likewise limited to making the requested service work and keeping it protected.

The preference items record a selection you actively made in the interface, are used only to honour that selection, and are not repurposed for any other end.

No consent banner is currently displayed, because no storage technology requiring consent is in use. Should that change, a consent mechanism will be implemented before the technology is activated, and refusing or later withdrawing consent will be made as straightforward as giving it.

13. Managing storage technologies

Several controls are available directly in the interface. The language, the display currency and the theme can each be changed using the selector provided. The authenticated session can be ended by signing out or by disconnecting your wallet.

All stored values can also be removed through your browser, by clearing site data for stake-only.org or by clearing cookies and browser storage generally. Browsers differ, and the relevant setting is usually found under privacy, site data or stored data.

Most browsers also allow cookies to be blocked entirely, or blocked selectively by site. Blocking storage that is strictly necessary will prevent the wallet connection from being maintained and may make Account functionality unusable.

Clearing stored values resets your interface preferences and ends any open session. It has no effect on the blockchain.

14. Browser storage and the blockchain

Browser storage should not be confused with blockchain permissions or on-chain records. They are separate mechanisms and clearing one does not affect the other.

Clearing your browser data does not delete a blockchain transaction, does not remove an address from a public ledger, does not unstake or undelegate CRO, does not reverse a confirmed claim or compound operation, does not remove a reward already distributed, and does not revoke an authorisation granted on-chain, including an Auto-Restake authorisation.

Disconnecting a wallet from the site is therefore not equivalent to revoking a blockchain permission. Where an on-chain revocation is required, it must be performed through the relevant wallet or protocol mechanism.

15. Third-party services

Stake-Only displays information obtained from external data sources and links to blockchain explorers, wallets, decentralised exchanges, social networks and project websites.

A link on its own does not cause the third party to store information on your device while you remain on Stake-Only. Once you open or interact with that service, it applies its own cookies and storage under its own policies, which Kcalb Ltd does not control.

You should review the privacy and cookie information of any external service before using it.

16. Personal data

Some storage technologies may involve personal data, depending on what is stored and whether it can be linked to an individual. Where that is the case, the processing is also governed by the Privacy Policy and by applicable data protection law.

The Privacy Policy addresses the wider categories of data processed by Stake-Only independently of browser storage, including wallet addresses, on-chain activity, account and profile information, connection logs, Loyalty Program records, snapshots, holdings, scores and rewards.

17. Review and changes

The inventory in this policy describes the configuration identified at the effective date shown at the top of the page. It is accurate for that configuration and must be reassessed when the site changes.

Before any new storage technology is deployed, Kcalb Ltd assesses what it stores or accesses, its purpose, whether a third party is involved, how long the information persists, whether personal data is processed, and whether consent or another control is required by law.

A review is carried out periodically and whenever a material change is made to the front end, to wallet integration, to analytics, to security or to third-party dependencies. This policy is updated to reflect the result, and the effective date identifies the current version.

18. Contact

Questions about this policy or about the storage technologies used by Stake-Only may be sent to Kcalb Ltd.

Kcalb Ltd, Company No. 14132246, registered in England and Wales. Registered office: Balfour House, 741 High Road, Finchley, London N12 0BP, United Kingdom.

Email: [email protected]

Company website: kcalbapp.com