Privacy Policy

Last updated: February 2026

1. Zero-Knowledge Architecture

STAKD is built on a zero-knowledge architecture. Your portfolio data is encrypted client-side using AES-256-GCM before it ever leaves your device. We cannot read, access, or decrypt your data. This is not a policy choice — it is a technical impossibility.

2. Data We Do NOT Collect

  • Email addresses
  • Names or personal identifiers
  • Phone numbers
  • IP addresses (not logged)
  • Wallet addresses (encrypted client-side)
  • Portfolio holdings (encrypted client-side)
  • Behavioral or analytics data

3. Data We Store

We store only encrypted blobs on our servers. These are the result of AES-256-GCM encryption performed entirely in your browser. Without your passphrase, this data is indistinguishable from random noise.

4. No Tracking

STAKD does not use cookies, analytics services, tracking pixels, or any form of user tracking. We do not use Google Analytics, Mixpanel, Hotjar, or any similar service. Ever.

5. No Third Parties

We do not share, sell, or provide your data to any third party. Since we cannot decrypt your data, there is nothing meaningful to share.

6. Open Source

STAKD is 100% open source. You can verify every claim in this privacy policy by auditing our source code on GitHub. We encourage you to do so.

7. Data Deletion

You can delete your encrypted data at any time from within the app. Since we don't have your email or any identifier, there is no account to delete — just encrypted blobs tied to your passphrase-derived key.

8. Changes to This Policy

If we make changes to this privacy policy, we will update the date at the top. Since STAKD is open source, all changes are publicly auditable in our git history.