Privacy Policy

This privacy policy explains how MB Kripto Bite (hereinafter — „we“, „us“, „our“) collects, uses and protects your personal data when you use defiriskos.com and its English-language version, en.defiriskos.com.

MB Kripto Bite is a small partnership („mažoji bendrija“, MB) registered in the Republic of Lithuania, operating an educational platform about decentralized finance (DeFi).

Contact form:

• Name
• Email address
• Message content

Newsletter subscription:

• Email address (only with your explicit consent)

Automatically collected data:

• IP address
• Browser type and version
• Page views (Vercel Analytics)
• Device and operating system

Local storage (localStorage):

• defi-level — difficulty level selection (technical, not sent to the server)
• defi-risk-os-progress-v1 — lesson progress (which lessons you have read)
• defi-privacy-notice-seen-v1 — first-visit notice flag
• defi-reviews — reviews (stored only in your browser)

You have probably noticed — other websites require you to click an „Accept cookies“ button. We don't have one. Here's why:

1. We don't use cookies

Vercel Analytics, which we use for anonymous statistics, is cookieless by design — it places no cookie in your browser at all. This is a distinctive Vercel design choice, unlike Google Analytics or Facebook Pixel, which use tracking cookies.

2. localStorage = NOT a cookie

Local storage (localStorage) is technologically different from cookies:

• Never sent to the server
• Never used to track you across websites
• Stored ONLY on your device
• Can be deleted at any time via your browser settings

3. We only use „strictly necessary“ storage

The GDPR and the ePrivacy Directive do NOT require consent for strictly necessary data (e.g. UI settings, language choice, login state). Our localStorage data is exactly that type:

• Difficulty level — without it the site doesn't work properly (which version should it show?)
• Lesson progress — directly part of functionality the user requested
• Privacy notice flag — so we don't show the same notice over and over

4. Third parties

Our website has no third-party tracking — no Google Analytics, no Facebook Pixel, no Hotjar, no TikTok Pixel. The only integration is Vercel Analytics (cookieless) and our own server infrastructure.

Bottom line: Instead of an aggressive cookie banner, we show a short informational notice on your first visit — just so you know we care about your privacy.

We use your data for the following purposes:

• Responding to inquiries — when you contact us via the contact form
• Sending newsletters — only with your explicit consent (you can unsubscribe at any time)
• Improving the website — anonymous analytics help us understand which lessons are most useful

We do not sell and do not share your personal data with third parties for commercial purposes.

Under the General Data Protection Regulation (Regulation (EU) 2016/679, „GDPR“), you have the following rights:

• Right of access — find out what data we hold about you
• Right to rectification — report inaccurate data
• Right to erasure („right to be forgotten“) — request deletion of your data
• Right to restriction of processing — suspend the use of your data
• Right to data portability — receive your data in a structured format
• Right to object — object to certain processing of your data

To exercise these rights, write to us at: info@defiriskos.com

You also have the right to lodge a complaint with a supervisory authority. In Lithuania, this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI): vdai.lrv.lt

Our website does not use traditional cookies. Instead, we use:

localStorage data is stored only in your browser, is not sent to our servers, and cannot be used to identify you.

We use the following third-party services:

Vercel's servers may be located in the US. Data transfers are carried out under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of protection under GDPR requirements.

In the case of CoinGecko and Gold API, no personal data is transferred — only publicly available price queries are sent.

Our website is not directed at, and we do not knowingly collect data from, individuals under 18 years of age. If we learn that a minor has provided us with personal data, we will delete it without delay.

We may update this privacy policy. We will notify you of significant changes on the website. We recommend reviewing this page periodically.

Last updated: 7 April 2026

If you have questions about this privacy policy or want to exercise your rights: