Privacy Policy

1. Summary

We collect as little as possible. The core of this service is a Bitcoin Lightning payment, which is designed to be pseudonymous on the payment rail itself. We do not ask customers to create accounts.

2. What we collect

2.1 Checkout (customer-facing)

• Order data — the amount, the order reference, the Lightning invoice, its status and timestamps.
• Technical data — IP address, user agent, and request timestamps, recorded in web server logs for security, abuse prevention, and troubleshooting.
• Local storage — your checkout preferences (such as a remembered payee name) are stored in your own browser. They never leave your device.

2.2 Merchant API

• Credentials — your API key and webhook secret, stored in hashed form where possible.
• Order records — the references, amounts, and statuses you submit or receive, used to reconcile payments.
• Webhook deliveries — the destination URL, delivery attempts, and response codes, so that you can troubleshoot failed notifications.

3. What we do NOT collect

• Government identity documents;
• Bank account numbers;
• Card numbers;
• Private keys or seed phrases — the operator's node keys never leave the server and are never exposed through this site;
• Marketing profiles or third-party tracking identifiers.

4. How data is used

• Operating the checkout and confirming payment status;
• Delivering webhook notifications to merchants;
• Preventing abuse, fraud, and denial-of-service attacks;
• Meeting legal, accounting, and tax obligations.

5. Sharing

We do not sell personal data. Data may be shared with: hosting and infrastructure providers (the server operator, the database engine), the Lightning Network node we operate to receive payments, and authorities where disclosure is legally required. Our payment clearing happens within the Lightning Network itself.

6. Retention

Order records are retained for as long as required for accounting and dispute handling, and are then archived or deleted. Server logs are retained for a limited period for security purposes.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to certain processing. Contact [email protected] and we will respond within the period required by applicable law.

8. Security

Traffic is encrypted with TLS. Administrative access is restricted, credentials are stored as hashes where possible, and the service is protected by rate limiting and network-level filtering. No system is perfectly secure, but we apply the same care to your data as we do to the funds we are asked to receive.

9. Changes

We may update this policy. Material changes will be reflected in the date above.