Privacy Policy

1. Data we process

• A random membership identifier, encrypted session cookie and one-way hashes of session, CSRF and recovery secrets.
• BTCPay store, checkout, invoice and subscriber identifiers; price, currency, status and paid-period dates. We do not receive a wallet seed or private key.
• Download audit data: opaque file handle, request method, range indicator and time.
• A keyed, non-reversible representation of an IP address for rate limiting. Cloudflare may process ordinary network and security logs.
• Information you voluntarily send in rights, support or refund requests.

2. Why we process it

We use this data to create and recover sessions, verify payment settlement, enforce membership expiry, serve authorized files, prevent abuse, investigate security incidents, answer requests and meet legal or accounting obligations.

3. Images submitted to tools

The Identify and Similar Logo upload tools are not yet production services. When launched, their production privacy behavior must be separately verified. SimilarLogo’s intended design is transient processing without using visitor uploads for model training unless the visitor gives separate, explicit consent.

4. Service providers

Cloudflare provides website delivery, Workers, D1, R2 and security processing. BTCPay Server processes Bitcoin invoices and subscription state. Bitcoin transactions may be visible on a public blockchain; Lightning has different network visibility characteristics.

5. Retention and deletion

Pre-checkout sessions expire quickly; member sessions cannot outlive the paid period. Financial, rights and security audit records are retained for legitimate operational and legal needs. Some records are append-only to preserve payment and authorization integrity. Requests to access, correct or delete personal data will be handled subject to applicable law and necessary fraud, accounting and legal-record exceptions.

6. Security

Protected files remain in a private bucket and are streamed through an authorization Worker. Sensitive Worker values are stored as encrypted secrets, not in source code. No system is perfectly secure; please report suspected compromise promptly.

7. International processing and your rights

Infrastructure may process data in multiple countries. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and to complain to a regulator. Contact us to exercise a right.

Contact

Questions, rights notices and refund requests: ruhu1615@gmail.com.