Summary
GRAVE does not require an account, an email, or any personal identifier to use the protocol. You interact with immutable smart contracts directly from your own wallet.
- We do not run KYC, and we do not ask for your name, email, or phone number to use the protocol.
- We never take custody of your assets or your private keys.
- All vault activity is recorded on a public blockchain, which is permanent and outside anyone's control — including ours.
- The website may use privacy-respecting analytics and local browser storage to function.
This policy covers the GRAVE websites and interface only. The underlying smart contracts are public infrastructure; the blockchain they run on is operated by third parties, and its records cannot be edited or deleted by GRAVE or by you.
01 Who we are
"GRAVE," "we," "us," and "our" refer to the maintainers of the GRAVE Protocol and the websites
at grave.cash and app.grave.cash (the "Interface"). GRAVE is
experimental, non-custodial software. We are a data controller only in respect of the limited
Interface data described below; we are not a controller of the public blockchain.
02 Information we collect
We aim to collect the minimum necessary to operate and improve the Interface.
| Category | Examples | Why |
|---|---|---|
| Wallet address | Your public address when you connect | To display your vault, balances, and status |
| Technical data | Browser type, device, approximate region, referring page | Security, debugging, and aggregate usage |
| Usage data | Pages viewed, features used, errors encountered | To fix bugs and improve the Interface |
| Local settings | Selected network, UI preferences | To remember your choices between visits |
A connected wallet address is a pseudonymous identifier. In some jurisdictions it may be treated as personal data when combined with other information; we handle it accordingly.
03 What we don't collect
- Private keys or seed phrases — never. The Interface cannot see them and will never ask for them.
- Custody of assets — funds live in your vault contract, not with us.
- Government identity documents — there is no KYC to use the protocol.
- Names, emails, or phone numbers — unless you voluntarily contact us (see §13).
No one from GRAVE will ever ask for your seed phrase or private key. Anyone who does is trying to steal your assets.
04 Blockchain data is public & permanent
When you create a vault, deposit, check in, execute, or claim, those transactions are broadcast to Robinhood Chain and recorded on a public ledger. This data — including addresses, amounts, beneficiary allocations, timestamps, and vault addresses — is public, permanent, and outside our control.
We cannot alter, hide, or delete blockchain records, and neither can you. Anyone can inspect this data through a block explorer. Consider this before placing sensitive information onchain.
05 Wallet connections
The Interface connects to your wallet through Reown AppKit (WalletConnect) or, as a fallback, a browser-injected wallet. When you connect, your wallet shares your public address and network with the Interface. Connecting is a read/prompt relationship — the Interface proposes transactions, and nothing executes unless you approve it in your wallet.
Your wallet provider and the WalletConnect infrastructure have their own privacy practices, which govern the data they process during a connection.
06 Third-party services
The Interface relies on third parties whose processing is governed by their own policies:
| Service | Purpose |
|---|---|
| Hosting / CDN (e.g. Vercel) | Serving the website; server logs may include IP and request metadata |
| RPC providers | Reading and broadcasting blockchain transactions; may log requesting IPs |
| Reown / WalletConnect | Wallet connection infrastructure |
| Block explorers | Displaying onchain data |
| Web fonts (Google Fonts) | Typography |
We do not sell your data. We do not share it with third parties except as needed to operate the Interface or to comply with the law.
08 How we use information
- To operate, maintain, and secure the Interface.
- To display your vault, balances, deadlines, and status.
- To diagnose errors and improve performance and usability.
- To detect, prevent, and address fraud, abuse, or security incidents.
- To comply with applicable legal obligations.
Where required by law, our legal bases are our legitimate interest in running a secure, functional Interface, your consent (for non-essential cookies), and compliance with legal obligations.
09 Data retention
Interface analytics and server logs are retained only as long as needed for the purposes above, then deleted or aggregated. Blockchain data is permanent by design and is retained by the network indefinitely, independent of us.
10 Your rights
Depending on your jurisdiction (for example, under the GDPR or CCPA), you may have the right to access, correct, delete, or restrict processing of personal data we hold, to object to processing, and to data portability. To exercise these rights for Interface data, contact us (see §13).
These rights apply to data we control. They cannot extend to blockchain records, which are immutable and not controlled by GRAVE — we are technically unable to edit or erase them.
11 Children
The Interface is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12 Changes to this policy
We may update this policy as the protocol and interface evolve. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Interface after a change means you accept the revised policy.
13 Contact
Questions about this policy or your data can be directed to us via X (@gravedotcash). Please never include private keys, seed phrases, or other secrets in any message.