zkFLO Open app →

Privacy Policy

Effective 14 October 2026

The short version

  1. Who we are
  2. What this covers
  3. What we collect
  4. Your wallet and the app
  5. Blockchain data
  6. Cookies and browser storage
  7. Other services that receive data
  8. Why we use it
  9. Who we share it with
  10. Where it's processed
  11. Your rights
  12. Security
  13. Children
  14. Changes to this policy
  15. Contact

Who we are

The zkFLO team ("we", "us") runs zkflo.com and app.zkflo.com. We're responsible for the data described in this policy. You can reach us at [email protected] or @zkfloLabs on X.

What this covers

This policy covers the website at zkflo.com, including the docs, and the app at app.zkflo.com. It doesn't cover your wallet, Robinhood Chain, block explorers or other services we link to. Those have their own privacy policies.

The Terms of Service cover everything else about using zkFLO.

What we collect

Server logs

Our web server writes a line to its log for every request it handles. Each line has:

  • your IP address;
  • the date and time;
  • the page or file requested, and whether it worked;
  • the page you came from, if your browser sends it;
  • your browser and operating system, as your browser reports them.

We use the logs to keep the site running, fix problems and spot attacks. We don't use them to build profiles or track you across visits. The logs rotate daily and are deleted after 14 days.

Messages you send us

If you email us or message us on X, we get whatever you include, plus your email address or X handle. We keep it for as long as we need to deal with what you asked, and delete it when we no longer need it.

What we don't collect

We don't have accounts or sign-ups. We don't ask for your name, email, phone number or identity documents. We don't run analytics, advertising pixels, session recording or fingerprinting on the website or the app.

Your wallet and the app

The app only asks your wallet for your address when you choose to connect. The address stays in your browser for that session. The app doesn't send it to our servers.

To show balances, prices and Receipts, the app reads from Robinhood Chain directly from your browser, through the chain's public RPC at rpc.mainnet.chain.robinhood.com. Whoever runs that RPC sees your IP address and which addresses and contracts the app asks about, which can include your wallet address. When you sign a transaction, your wallet sends it to the network, and your wallet provider's privacy policy applies.

Until the contracts are deployed, the app runs on a preview. It doesn't read the chain, and the preview wallet is made up inside your browser. Nothing about it is sent anywhere.

Blockchain data

Deposits, withdrawals, share balances and every other transaction on Robinhood Chain are public. Anyone can see them, link them to your wallet address, and keep them. That's how blockchains work, not a choice we make, and we can't change or delete anything onchain.

The app, and later our indexer, read this public data to show the pool's history. When we process it, we're reading what's already public.

Cookies and browser storage

We don't set cookies.

The app saves one preference in your browser's local storage: how many hours of history the chart on the Pool page shows, under the key zkflo.span. It stays on your device, and you can clear it by clearing site data in your browser.

Cloudflare may set a short-lived security cookie if it needs to check whether a visitor is a bot. That cookie is used only for that check.

Other services that receive data

These services handle some of your data when you use zkflo.com or the app. Each one is responsible for what it does with it under its own policy.

ServiceWhat it does for usWhat it receives
CloudflareSits in front of our server: secure connections, caching and protection from attacks. Every request to zkflo.com and app.zkflo.com passes through it.Your IP address and the details of each request. Your browser may also send Cloudflare reports about failed connections.
Google FontsServes the typefaces the pages useYour IP address and browser details, when your browser downloads the fonts
Robinhood Chain RPCAnswers the app's questions about the chain, once the app runs on the real chainYour IP address, and the addresses and contracts the app looks up
Your walletHolds your keys and signs transactionsWhatever its provider's policy says
Block explorersOnly if you follow a link to one from the appWhatever you do on their site

Why we use it

We use server logs because we have a legitimate interest in keeping the website and app running, secure and free of abuse. We use your messages to answer you. We don't use your data for advertising, and we don't make automated decisions about you.

Who we share it with

We don't sell, rent or trade personal data. Apart from the services above, we only share data when the law requires it, or when we need to in order to protect our users, the pool or our systems from fraud or attack.

Where it's processed

Our server is in Singapore, hosted by OVH. Cloudflare and Google run worldwide networks, so they may process your data in other countries, including the United States. Data may therefore be processed outside the country you're in.

Your rights

Depending on where you live, you may have the right to ask what data we hold about you, to get a copy, to have it corrected or deleted, or to object to how we use it. To do any of these, email [email protected].

We have no accounts, so to find you in our server logs we'll need your IP address and roughly when you visited. Logs older than 14 days are already gone. We can't change or delete anything on the blockchain.

We'll answer within 30 days. If you're not happy with our answer, you can complain to the data protection authority where you live.

Security

The website and app only load over HTTPS. Only people who run the server can read its logs. No system is completely secure, but we keep as little data as we can, which limits what anyone could get at.

Children

zkFLO isn't for anyone under 18, and we don't knowingly collect data from children. If you think a child has sent us personal data, tell us and we'll delete it.

Changes to this policy

If what we collect changes, for example when the indexer goes live, we'll update this policy and the date at the top before the change takes effect. For significant changes we'll also say so on the website.

Contact

Email [email protected], or message @zkfloLabs on X.