Privacy Policy
This policy explains what personal data is processed when you use stake-only.org, why, on what legal basis, for how long, and what rights you have. It should be read together with the Terms and Conditions and the Cookies and Similar Technologies Policy.
Request deletion of your Stake-Only account and data
To request deletion of your Stake-Only account and associated personal data, contact Kcalb Ltd at [email protected]. Include the public Cronos POS address linked to your account and say that you want to delete your account and its associated personal data.
You can send a request without installing the Android app or connecting a wallet on this page. This support path is also available if the automatic Delete account action cannot complete because an authorization, obligation or historical record remains.
Verifying a request may require proof that you control the relevant wallet address, typically by signing a message. Never send a private key or recovery phrase.
Profile information and other personal data under our control are covered by the request. Financial obligations and records that must be retained for a legitimate reason are reviewed separately; any applicable retention is explained when handling the request. Public blockchain records cannot be erased by Kcalb Ltd. See Retention and Your rights below for the policy that applies.
1. Controller
The controller for the processing described here is Kcalb Ltd, company number 14132246, registered in England and Wales, registered office Balfour House, 741 High Road, Finchley, London N12 0BP, United Kingdom.
Using Stake-Only requires no account creation in the traditional sense, no password and no disclosure of your legal identity. Access is obtained by connecting a blockchain wallet you control.
Public blockchains queried by the site are distributed infrastructures operated by no single party. Kcalb Ltd is not the controller of a public ledger.
2. Legal framework
Kcalb Ltd processes personal data in accordance with United Kingdom data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 where browser storage is concerned.
Where the law of another country applies mandatorily and grants stronger rights, nothing in this policy is intended to reduce them.
3. Data processed
On-chain data. The wallet addresses you connect or associate, and their public activity: delegations, staking rewards, claims, compounds, unstaking, token holdings relevant to Program eligibility, liquidity positions where supported, and the transactions recorded against those addresses. This information is public by nature and is read from the blockchain.
Loyalty Program data. Membership dates and status, role and coefficient, seniority level, daily and cumulative points, scores and rankings, eligibility status, Premium status and share, partner scores, snapshot history, and the calculated, pending and distributed rewards attached to your addresses.
Profile data you choose to provide. Pseudonym, avatar, banner, biography, social links and website links. This is optional and public where you publish it.
Social verification data. Where you request verification of a social account: the network concerned, the account identifier, the content used for verification, the verification code and its result.
Linked accounts. Where you link a Discord, Google, LinkedIn, X or Crypto-Only account: its identifier, display name and profile photo, used to show that photo if you choose it and to recognise you on the other KcalbApp sites. You can remove a link at any time from your Profile.
KCB rewards. Where you link Discord and share your card on X or Crypto-Only: your Discord account identifier, the link of your post and the date. About an hour later the public post is read again to check it is still online. The KCB are credited to your Discord account through our community points provider, Flipsuite, which receives your Discord account identifier and the number of KCB. When the account is deleted, these records are dissociated from it; the Discord identifier is kept only so that the same reward is never given twice.
Recognition on InoTimes. InoTimes (inotimes.com), also run by Kcalb Ltd, uses the same sign-in applications. If you sign in there with an account linked here, InoTimes asks Stake-Only whether it belongs to a member and receives your public name, the link to your public member card, and the Discord account and the X and Crypto-Only usernames linked here, used only for the KCB of shared articles. No wallet address is shared. InoTimes then shows a "✓ Stake-Only" mark next to your name and comments. Removing the link here, or deleting your account, ends this.
Technical data. Connection logs including IP address, user agent and timestamps, session records, last login, error and security logs, and the information needed to prevent abuse.
Interface preferences. Language, display currency and theme, stored in your browser as described in the Cookies Policy.
Communications. Where you contact us: your email address, the wallet address needed to identify the issue, and the content of the exchange.
4. Data never collected
No identity documents. No know-your-customer procedure. No name, postal address, telephone number or government identifier.
No private key and no recovery phrase. The site is technically incapable of receiving them and has no use for them. Program eligibility is verified exclusively from public blockchain data.
Special category data such as health, political opinions, religious beliefs or sexual orientation is not sought. Do not include unnecessary personal information in a public profile or in a support message.
5. Security notice
The Stake-Only team will never ask for your recovery phrase, private keys or passwords. It will never ask you to sign a transaction outside this site. It will never contact you first by direct message.
Any such request is an attempt at fraud, whoever appears to be sending it. Do not respond, and report it on the official community channels.
6. Purposes and legal bases
Each processing activity below rests on a specific legal basis under data protection law.
| Purpose | Legal basis |
|---|---|
| Providing the site, recognising a connected wallet and displaying your position | Performance of a contract |
| Operating the Loyalty Program, calculating points, roles, seniority and eligibility | Performance of a contract |
| Preparing, recording and auditing distributions and rewards | Performance of a contract |
| Providing profile and social verification features you request | Performance of a contract |
| Security, abuse prevention and protection of the platform | Legitimate interests |
| Connection logs and technical records kept for security | Legitimate interests |
| Investigating fraud or manipulation | Legitimate interests, or legal obligation |
| Complying with law, sanctions screening or a binding authority request | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
| Remembering your interface preferences | Legitimate interests |
Where legitimate interests are relied on, those interests are the operation and security of the platform, the integrity of the calculations on which distributions depend, the prevention of fraud, and the protection of users. Those interests are balanced against your rights and freedoms.
No processing is carried out for advertising purposes, and no personal data is sold.
7. Automated calculations
The Loyalty Program is operated by automated rules. The system determines your role and coefficient, your seniority, your daily and cumulative points, your Premium eligibility, your share of a distribution pool, and the amount of a reward, using your delegated stake, your token holdings, market data, your membership status and the results of the daily snapshot.
These calculations are necessary for the Program to function: a distribution shared among members cannot be computed by hand. Their effect may be that you gain or lose points, become or cease to be eligible for a level, or receive a different share.
The parameters used are published and the principal factors applied to your position are visible in your Account and through the Explorer.
Where the law treats a solely automated decision as producing legal or similarly significant effects, you may ask for information about it, ask for human review, make representations and contest the outcome. Such requests are handled at the contact address given below.
8. Public data and the Explorer
Part of the data used by Stake-Only is already public on a blockchain. Certain information is also displayed publicly through the Explorer so that the operation of the Program can be verified independently.
Publicly displayed information may include a pseudonym, a wallet address or shortened address, role, level, points, ranking, stake, distributions and transaction hashes.
Connection logs, IP addresses and other security records are never published.
You should be aware that a public blockchain address can sometimes be linked to other activity visible on that or another public ledger.
9. Permanence of on-chain records
Blockchains are public, append-only ledgers replicated across many independent machines. A transaction recorded on one of them is permanent and outside the power of any single party to alter or erase, including Kcalb Ltd.
Deleting your Stake-Only profile removes the profile information from the site. It does not and cannot remove on-chain records, which simply remain without a pseudonym attached to them.
The right to erasure is therefore limited in practice as regards blockchain data. Where erasure is possible in systems controlled by Kcalb Ltd, it is carried out.
10. Recipients
Personal data is not sold and is not shared for advertising. It may be disclosed to the following categories of recipient where necessary.
Technical providers. Content delivery and protection against attacks, hosting, backups, and the blockchain node and API services queried to read on-chain data. Each acts under its own terms and, where it processes data on our behalf, under data protection obligations.
Public blockchains. A transaction submitted to a network is broadcast to it and becomes publicly observable. This applies to delegation, claim, compound, unstaking and distribution transactions.
Professional advisers. Lawyers, accountants, auditors or insurers, strictly where necessary to obtain professional services or to establish or defend legal rights.
Public authorities. Courts, regulators, tax authorities or law enforcement, where disclosure is legally required or lawfully justified.
A successor. If the business is sold, restructured or transferred, relevant data may be disclosed to the acquirer under appropriate protections.
Partner projects. Admission of a partner token does not give that project access to private account information. A partner may observe what is already public on a blockchain or on the Explorer.
11. International transfers
The site operates over the internet and over global blockchain infrastructure. Technical data may therefore be processed outside the United Kingdom.
Where a provider processing data on our behalf is located in a country without a United Kingdom adequacy decision, appropriate safeguards are used where the law requires them, such as the International Data Transfer Agreement or the UK Addendum to standard contractual clauses.
Information recorded on a public blockchain is different in nature: it is accessible worldwide by design, independently of Kcalb Ltd.
12. Retention
Data is kept only for as long as necessary for the purpose for which it was collected, subject to legal obligations and to the need to defend legal claims.
Profile data is kept while the profile exists and is deleted or dissociated when the profile is deleted, subject to technical backups.
Loyalty Program and distribution records may be kept after membership ends where necessary to audit the Program, justify a distribution, investigate fraud or defend a claim. Where a claim is possible, records may be kept for up to six years after the end of the relationship, which corresponds to the limitation period applicable in England and Wales, unless the law requires a different period.
Connection logs and security data are kept for the period necessary for security, incident investigation and abuse prevention, and longer where connected to an incident, a suspected fraud or a dispute.
Support correspondence is kept for the time needed to handle the request and, where necessary, to document the exchange.
Data recorded on a public blockchain is retained by the network itself and is not subject to deletion controls operated by Kcalb Ltd.
13. Security
Reasonable technical and organisational measures protect the data under our control against unauthorised access, alteration, disclosure or loss. These include access controls, restricted administrative permissions, encrypted connections, logging, monitoring, backups and incident procedures.
No internet-connected system can be guaranteed free of risk. You remain responsible for the security of your own wallet, devices, keys and authentication methods.
14. Your rights
Subject to the conditions and exemptions in applicable law, you may have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, rights concerning automated decisions, and the right to withdraw consent where consent is the basis relied on.
Several of these can be exercised directly in the interface. Your profile is editable at any time, and account deletion is available from the Profile tab.
For anything else, write to the contact address below. Because the service is wallet-based rather than identity-based, verifying a request may involve demonstrating control of the relevant blockchain address, typically by signing a message.
Not every right applies to every activity. The right to erasure does not extend to blockchain records. The right to portability does not extend to data calculated by the Program or already public on a ledger.
15. Complaints
If you consider that your data has not been handled properly, contact Kcalb Ltd first so that the matter can be investigated. A qualifying complaint is acknowledged within the period required by law.
You also have the right to complain to the United Kingdom supervisory authority, the Information Commissioner's Office, which regulates data protection in the United Kingdom. Contacting us first does not limit that right. Current contact details and procedures are published on the regulator's own website.
If you are located outside the United Kingdom, you may also be able to complain to your local supervisory authority where its law applies.
16. Minors
Stake-Only is not intended for persons under 18 years of age and is not directed at minors.
Personal data is not knowingly collected from a person below that age. Where we become aware that an account relates to such a person, appropriate action is taken under the Terms and Conditions and applicable law.
17. Cookies and browser storage
A limited amount of information is stored in your browser: an authenticated session identifier, your interface preferences, short-lived technical state, and security items applied by the content delivery network.
No advertising or behavioural analytics technology is used. The Cookies and Similar Technologies Policy describes each item, its purpose, its duration and how to remove it.
18. Changes
This policy may be updated to reflect a change in the service, a new feature, a new category of data, a new provider, or a legal or regulatory development.
The effective date at the top of this page identifies the current version. Where a change materially affects your rights, appropriate notice is given and, where the law requires it, consent is sought before the processing begins.
19. Contact
For any question about this policy, or to exercise a data protection right, write to Kcalb Ltd.
Kcalb Ltd, Company No. 14132246, registered in England and Wales. Registered office: Balfour House, 741 High Road, Finchley, London N12 0BP, United Kingdom.
Email: [email protected]
Company website: kcalbapp.com
The team never initiates a private first contact and will never ask for keys or a recovery phrase.