Privacy Policy

Effective September 8, 2026

What we collect from merchants

When you create an account we store your email address, a hashed password, your business name, and any store URL you give us. When you register a wallet we store the public address or public account key you paste. We never ask for, accept, or store private keys or seed phrases, and our software rejects them if they are pasted by mistake. We do not collect government identification, and we do not run identity verification.

What we collect about payments

For each order we store the amount, the coin, the deposit address, the transaction identifier once a payment is detected, timestamps, and any order reference or callback URLs your system supplies. This is the information needed to tell you that you were paid. Blockchain transactions are public records maintained by their networks, not by us.

What we collect from customers who pay

A customer paying through a Penny page is not asked to create an account or provide personal information. We record the coin chosen, the payment, and standard web server information such as IP address and browser type, which we use for security and abuse prevention only.

Security and abuse prevention

We log failed login attempts and apply rate limits to protect accounts. Login and signup forms use Cloudflare Turnstile to block bots; Turnstile is operated by Cloudflare under its own privacy terms. We email you when a payout wallet on your account changes so that you can react to any change you did not make.

How we use information

To operate the service, confirm payments, bill fees, secure accounts, respond to your requests, and comply with law. We do not sell personal information, and we do not use it for advertising.

Sharing

We share information only with the service providers needed to run Penny (hosting, email delivery, bot protection, and the public blockchain data providers we query), with your own systems when you configure webhooks, and when required by law. Public blockchain data providers receive wallet addresses because that is how a blockchain is read; they do not receive your account details.

Retention

Account and order records are kept while your account is open and for as long as needed afterward to meet legal and accounting obligations. You may ask us to close your account and delete personal information that we are not required to keep.

Your rights

You may access, correct, or delete your personal information by emailing [email protected]. If you are in a jurisdiction that grants additional rights, we honor them.

Cookies

We use a session cookie to keep merchants logged in to the dashboard and nothing for tracking. Customers paying through a Penny page receive no tracking cookies from us.

Changes

We will post any changes here and update the effective date.