Privacy

What we keep

• Your phone number, and your email if you add one.
• Your PIN, only as a one-way hash.
• Your payments, refunds and problem reports.
• The Stripe ids of your customer record and of merchants' accounts.
• For merchants: the signed agreement with its date and the address it was signed from, and whether Stripe's identity check passed.

What we never see

• Card numbers and security codes: they go straight to Stripe's own form.
• Bank account numbers, Social Security numbers and ID pictures: merchants give them to Stripe on Stripe's own pages.

What we do not do

• No public feed of payments.
• No uploading of your contacts.
• No analytics, ad trackers or tracking pixels. Our emails are plain text.
• No selling or sharing of your data for ads.

Who else is involved

• Stripe takes card payments and holds merchants' money until they cash out.
• Everything else runs on our own servers: the site, the database, email and text messages.

How long we keep it

• Login codes: a day. Sign-in sessions: until they end. Message text: 30 days.
• Payment records: 5 years, as the law requires, then deleted.