Nothing. This page explains what that means exactly, where the limits are, and how to check all of it yourself.
There is no sign-up, no email, no password and no KYC. The app has no concept of a user. You connect a wallet, the page reads the chain, and your wallet signs whatever you decide to do.
This site sets no cookies at all. There is no analytics script, no tag manager, no session recorder, and nothing that reports errors to an outside service. Nothing measures you, because nothing is loaded that could.
Your browser does keep one thing locally: which wallet you last connected with, so the page can offer to reconnect. That sits in your own browser's local storage, is readable only by this site, never leaves your machine, and clearing site data removes it.
Fonts are downloaded into this repository and served from this origin — no Google Fonts, no CDN. Scripts, styles and images all come from here too. Loading either page makes no request to any outside company.
The site also sends a Content-Security-Policy that blocks connections to other domains at the browser level. You do not have to trust this paragraph: open the Network tab and reload.
The app reads chain 4663 through /api/rpc on this site rather than calling a node provider from your browser. That means the provider sees our server, not your address and not your IP.
The relay itself:
Whoever hosts this site keeps its own request log, the same as every web host does. That log typically records an IP address, a timestamp and which page was asked for. It is created by the hosting platform before our code runs, so we cannot switch it off from here.
What it does not contain: no wallet address, no request body, and nothing our code put there. Chain reads are POSTs whose contents a request log does not record, and we add nothing to it ourselves. We do not read these logs, and nothing on this site is built on top of them.
This is why the home page says your IP is not logged by our code rather than not logged at all. If that distinction matters to you, a VPN or Tor puts it back in your hands.
One table, of daily vault figures: the vault's address, the day, the block, its APY, total assets, liquidity and share price. These are public numbers anyone can read from the chain. There is no table, and no column, for addresses, positions, sessions or visits.
Browser-extension wallets are the default path and talk to nothing over the network — the extension puts an object on the page and the conversation is local.
If you choose to connect by QR code instead, that uses WalletConnect, which is a relay run by someone else. Choosing it opens a connection to their servers; nothing reaches them before you choose it. Coinbase Wallet is deliberately not offered, because its SDK can contact Coinbase during setup, before anyone has chosen anything.
Your transactions are public. Deposits, loans, collateral and repayments all live on chain 4663, where anyone can read them, the same as every other transaction there. We cannot change that, and we are not going to pretend otherwise.
Anyone who already knows your address can see everything you did here, and the vaults and markets are shared contracts — you can read the lending core yourself. If you need your on-chain activity itself to be private, this is not the tool for that.
If any of this stops being true, this page changes with it. The claims on the home page are meant to be checkable, not aspirational.