Privacy Policy

The account record is intentionally thin: an email address or a 32-character token, a password hash, and nothing else. No passport scans, no selfies, no phone numbers, no legal names, no street addresses — the signup form never asks. A credited payment appends exactly four fields: the invoice's USD amount, the coin, the deposit address, and the transaction hash that matched. That is the complete customer object.

Two negatives are written down so they cannot drift. Coins and wallets never enter AML scoring or chain-analysis tooling — a public ledger is not our enforcement surface. Traffic content is not stored either: no payload captures, no netflow mirrors. Connection metadata lives at most 24 hours, then it is dropped. Email exists to deliver credentials and invoices; a disposable inbox works as long as it receives. Nothing feeds a mailing-list economy, because nothing here is for sale.

What we cannot shield you from is stated as-is. Wallet privacy belongs to the coin, not to our rack: pay in Monero and the invoice trail ends at a one-time address; pay in transparent-chain assets and a public explorer does the work for anyone. Retention follows the law of each facility, and every jurisdiction page names it. The warrant canary and the acceptable use policy document the mechanics of what is and is not collected.