Privacy Policy
Last updated 21 September 2026
What we collect
GateKept is usable without an account, and most of what the site shows is public blockchain data that has nothing to do with you. What we do collect:
- Your phone number
- Only if you choose to secure your account with SMS two-factor authentication. We use it to send you one-time verification codes and for nothing else. See SMS messaging below.
- What you send us
- The contents of an email or message you send to support, so we can answer it.
- Technical request data
- Our servers log the IP address, browser user agent, page or endpoint requested, and time of each request. This is ordinary web server logging: we use it to keep the service up, to apply rate limits, and to investigate abuse.
- Aggregate usage measurements
- Vercel Analytics and Speed Insights record page views and loading performance in aggregate. They do not use advertising cookies and do not build a profile of you across other sites.
- A bot-protection session
- Before the site can query our API, Cloudflare Turnstile runs a challenge that tells us you are a person rather than a scraper. Passing it gives your browser a short-lived signed session token. Cloudflare receives the challenge data as part of this.
- Preferences kept on your device
- Filters, the chain you last chose, which view you had open. These live in your browser's local storage, stay on your device, and are never sent to us. Clearing your browser data removes them.
We do not ask for your name, your postal address, your date of birth, or any payment card details, and we never ask for a wallet seed phrase or private key. No one from GateKept will ever ask you for those.
How we use it
We use the information above only to:
- operate the site and the API behind it, and keep them available;
- send one-time verification codes when you sign in or confirm a sensitive action, and warn you about account security events;
- detect and stop abuse — scraping, credential stuffing, denial of service — and enforce rate limits fairly;
- measure performance and fix what is slow or broken;
- reply to you when you contact support.
We do not use your information for advertising, and we do not run behavioural advertising on this site.
SMS messaging
If you enable two-factor authentication, GateKept sends one-time verification codes to the mobile number you provide. You opt in by entering your number and requesting a code; providing a number is optional and is never a condition of using the site.
These messages are transactional. We send a code when you ask for one and when confirming a sensitive action on your account, so the number of messages depends on how often you sign in. We do not send marketing or promotional text messages.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Your phone number and your consent to receive these messages are not shared with anyone for their own use. The only party that ever sees your number is the messaging provider that delivers the text on our behalf, which is contractually bound to use it solely for that delivery.
You can stop the messages at any time by replying STOP to any message from us, and get help by replying HELP or emailing [email protected]. Message and data rates may apply. Full terms are in our Terms & Conditions.
Who else is involved
We do not sell your personal information, and we do not share it for anyone else's marketing. We do rely on service providers who process data on our behalf, under instructions, to run the service:
- Vercel
- Hosts the website and provides aggregate analytics.
- Render
- Hosts the API that serves the data on the site.
- Neon
- Hosts the database behind the trackers.
- Cloudflare
- Provides the Turnstile bot check that protects the API.
- Our SMS provider
- Delivers one-time verification codes to your mobile number, and only for that purpose.
We may also disclose information where the law requires it — a valid legal request, a court order — or where it is necessary to investigate fraud or protect the service and its users.
How long we keep it
Server logs are kept for a short period, normally no more than 30 days, and then deleted. A phone number is kept for as long as you have two-factor authentication turned on, and is deleted when you turn it off or ask us to remove it. Anything you send to support is kept for as long as it takes to resolve the issue and a reasonable period afterwards.
Your choices
- Stop SMS messages at any time by replying STOP, or by turning off two-factor authentication.
- Ask for a copy of what we hold about you, or ask us to delete it, by emailing [email protected]. We will respond within 30 days.
- Clear the preferences stored on your device by clearing your browser data.
Security
Traffic to the site and the API is encrypted in transit. Access to the systems that hold any personal data is restricted to the people who need it to operate the service. No system is perfectly secure, but we will tell affected users promptly if a breach ever puts their information at risk.
Children
GateKept is not directed at children. It is intended for people aged 18 or over, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email [email protected] and we will delete it.
Changes to this policy
If this policy changes, the new version appears on this page with a new date at the top. Where a change materially affects how we handle your information, we will say so clearly rather than quietly updating the date.
Contact
GateKept — [email protected] — gatekept.io