Privacy notice — review draft

The service processes account and authentication information, project settings, receiving wallet addresses, order and payment references, blockchain payment observations, fee records and webhook endpoints and delivery records. Optional customer information may also be provided by merchants.

Authentication uses access tokens and cookies, including an HttpOnly refresh cookie and a verification-purpose cookie. Theme, locale and checkout access handling involve browser storage. The public frontend supports Cloudflare analytics with public-route restrictions and sensitive URL filtering; deployment settings and the applicable consent approach require confirmation.

Source integrations include Resend for verification and password-reset emails, and Telegram is the published support channel. The complete processor list, enabled services, processing locations and contractual arrangements need confirmation. Do not send secrets in support messages.

Operator and privacy contact; purposes and legal bases by data category; processors and international transfers; retention, deletion and backups; rights and complaint procedures; cookies and analytics disclosures; effective date and update notices must be completed before final publication. No general retention duration or compliance guarantee is stated here.