KMB.FUN / POLICIES
Privacy policy
What KMB.fun collects, why it is used, and the choices available to you.
Effective October 23, 2026
Scope and operator
KMB.fun is responsible for information it processes to operate this website. This policy covers the Service, not independent wallets, blockchain networks, or third-party websites. A public wallet address can identify or be linked to a person; we do not treat wallet activity as automatically anonymous.
Information you provide
When you connect or authenticate a wallet, we process its public address, sign-in challenges, signed messages, session credentials, and authentication timestamps. When you use platform features, we may store coin registrations, transaction intents and signed transaction bytes, transaction signatures, submitted metadata and images, profile information, and social actions such as following. We do not ask for or store the private key or recovery phrase of your connected wallet. Platform automation uses separate service-controlled signing keys.
Network and usage information
Requests expose technical information such as IP address, request path, time, and browser-supplied request headers to our server and infrastructure providers. We use IP-derived location to enforce regional access restrictions and IP-derived identifiers to limit abuse. Diagnostic logs may include IP addresses when access verification fails. First-party page analytics records an event identifier, a daily hashed session identifier, a recognized page path, and a timestamp. That analytics payload does not include your wallet address, IP address, URL query parameters, or referrer. The current analytics client skips collection when the browser sends Do Not Track set to 1.
Browser storage
We use session storage for a temporary wallet sign-in session and a page-analytics session identifier. We use local storage for preferences, such as sidebar appearance and reduced motion, and a recent transaction-intent identifier used to resume receipt checks. Browser storage is not permission to sign a transaction. You can disconnect your wallet, sign out, or clear site storage through your browser. Clearing storage can remove your local preferences and receipt shortcut without deleting a public transaction or its server-side record.
How information is used
We use information to provide authentication, prepare and reconcile transactions, publish coin information and receipts, calculate rankings and reward eligibility, display profiles and social features, operate storage and analytics, diagnose failures, prevent abuse, enforce regional restrictions, and respond to support or legal requests. Where a lawful basis is required, we rely on performance of our agreement for requested services, legitimate interests in operating and securing the Service, compliance with applicable legal obligations, and consent where it is required. You may object to processing based on legitimate interests where applicable law provides that right.
Public records and sharing
Wallet addresses, coin information, public profiles, transaction signatures, and activity you publish may be visible to other users. Blockchain transactions are public and may remain accessible independently of KMB. Our processors and service providers may handle information needed for hosting, storage, network access, RPC requests, content delivery, monitoring, and support. Publishing metadata to a distributed storage service can make it available outside KMB’s control. Wallet providers and external links process data under their own policies. Information may also be disclosed when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or carry out a business transfer subject to appropriate protections.
Retention and deletion
Sign-in challenges expire after five minutes and wallet API sessions after 30 minutes. Expiry stops their use for authentication; it does not promise immediate deletion of all database records. First-party page-analytics records are scheduled for deletion after 90 days through periodic cleanup. We retain transaction, registration, receipt, accounting, and security records for as long as reasonably necessary for the purposes described here, dispute resolution, integrity checks, and applicable legal obligations. Unpublished uploads can expire or be evicted under storage limits. Backup copies and security logs may persist until their normal rotation. Public blockchain records and copies held by third parties cannot be erased by KMB.
Security and international processing
We use measures such as encrypted transport, signature verification, access controls, and restricted credentials to protect the Service. No storage or transmission method is completely secure. Our infrastructure and providers may process information in countries other than your own. Where applicable law requires safeguards for international transfers, we use the safeguards required for the relevant transfer. Do not submit sensitive personal information in public coin metadata or profiles, and never send a recovery phrase or private key to support.
Your choices and rights
Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability, or object to certain processing, and you may withdraw consent for processing that depends on consent. Requests can be limited by legal requirements, security, the rights of others, and the nature of public blockchain records. Contact us using the address below, identify the wallet or information concerned, and describe your request. We may ask for proportionate proof that you control the relevant wallet; we will never ask for its private key. You may also complain to the data-protection authority that has jurisdiction over your information.
Children and updates
The Service is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate. We update this policy when our practices change and publish the effective date here. Material changes will be communicated where appropriate.
Contact KMB.fun
For support, privacy requests, or questions about these policies, email support@kmb.fun. Include enough detail to identify the issue. Do not send private keys, recovery phrases, or session tokens.