Privacy

What we collect

For each payment: the Solana transaction hash, the payer wallet pubkey (which appears on the tx), the lamports paid, and the IP that submitted the verification request.

What we don’t collect

• · No email. No name. No phone. No card data.
• · No tracking cookies. No analytics scripts. No ad networks.
• · No private keys, no seed phrases, no signing keys. Ever.

How long we keep it

Payment audit log: 24 months (UK tax requirement). Expired API key records: retained for replay-prevention indefinitely (we store only the SHA-256 hash of the key, never the plaintext).

Your rights (GDPR)

Request export or deletion of your audit-log entries by emailing the address in the site footer with the wallet pubkey that submitted the payment. We respond within 30 days. Note: payment records may be retained where required by UK HMRC.

Third parties

Hosting: Cloudflare (CDN, Worker, D1). Solana RPC: third-party (your tx is visible on-chain regardless). No other data processors.