Privacy Policy

What we store

• Merchant account data: business name, email, password hash, two-factor settings, team members.
• Security data: sign-in IP addresses, session records and security events, and a request log (time, IP address, browser/device, endpoint) of API calls, dashboard changes, checkouts and donations.
• Payment data: invoices, deposit addresses, transaction hashes, payout destinations, and the customer identifiers merchants send (e.g. their own user IDs).
• Emails we send (in the outbox) for delivery and troubleshooting.
• Aggregate visit counts for our public pages: the page path, the domain of the site that sent a visit (for its first page only) and sign-up/demo steps, added up per day. No cookie, IP address, device or browser information is stored for this, and browsers that send Do Not Track or Global Privacy Control are not counted.

Why

To provide the service, secure accounts, prevent fraud, keep accounting records and meet legal obligations.

Who processes data for us

• Hetzner Online (servers in the EU) — hosting of the application and database.
• Cloudflare — network security and delivery; sees IP addresses and request metadata.
• Resend — delivery of account and notification emails.
• Changelly — only when a customer chooses to buy crypto by card in the checkout, under Changelly's own privacy policy.
• Public blockchains — transactions and addresses are public by nature and cannot be deleted.

Sharing

With the processors above acting on our behalf, and with authorities where legally required. We do not sell personal data and use no advertising or analytics trackers.

Retention

Accounting and transaction records are kept as long as required by law; security logs and the request log for a limited period (the request log for up to two years by default); backups rotate automatically.

Your rights

Depending on your jurisdiction you may request access, correction or deletion of personal data, subject to legal retention duties. Write to [email protected]. Customers of a merchant should first contact that merchant, who decides what data it sends us.

Cookies

Only a strictly necessary, HttpOnly session cookie is used for signing in. No advertising or tracking cookies.

Last updated: 25 September 2026. Questions: [email protected].