Privacy

No account, no key

Everything that reads the index or contributes data (the site, the API, the MCP tools, the client, telemetry and the changes feed) needs no account and no key, now and later. An email address is asked for only to deliver alerts or to join a waitlist, as a confirmation link, never a profile.

What we keep

• Reading the index (pages, the API, the MCP tools): nothing about you. We count requests per route per day; the count has no caller attached.
• Checking a seller (GET /v1/check, which the MCP tool check_x402_seller calls): we add one to a counter for the host you checked on that UTC day, so we know which sellers people are about to pay and can audit those first. Host only: never the path, the query string, your IP or anything about who asked. The counts are public at /v1/demand.
• Telemetry from @paidfor/x402-safe-fetch, opt-in in the client: exactly the documented fields (host, a sha256 of the path, outcome, amount, latency, validator names, client version) and the time we received it. Any other field is rejected. The payload is on /api.
• Team waitlist: the sha256 hash of your address, the one-line note if you wrote one, when you asked and when you confirmed. The address itself is used once, to send the confirmation link through Resend, and we do not store it; Resend keeps its own delivery log. Unconfirmed requests are deleted after 7 days.
• Seller replies sent to reply@paidfor.dev are published verbatim on the seller's page, as the seller page says.

In your browser

• A view cookie, set only when you switch between the human and agent views.
• Your theme choice, in your browser's local storage, never sent to us.
• Vercel Web Analytics counts page views without cookies.

Hosting

Vercel serves the site and keeps its standard request logs, which include IP addresses, under its own policy. Our rate limits hold an IP in memory for at most ten minutes and never write it anywhere. The hosted MCP server at mcp.paidfor.dev runs on Manufact and reads the same public API.

Removal

To remove a waitlist entry, write to reply@paidfor.dev from that address; we hash it and delete the entry.