Privacy Policy

Last updated: 27 July 2026

Purpose of This Policy

This Privacy Policy explains how we handle information when you use our website, protocol, or related services. PayMoney is designed as a trustless, self-custody financial protocol, where users retain control over their assets and cryptographic identity. By using PayMoney, you agree to this Privacy Policy.

Privacy by Design, Not Policy by Default

PayMoney is built on a privacy-first architecture where data minimization is enforced at the protocol level. Our system is designed around:

• Self-custody ownership
• Minimal data collection
• Cryptographic verification
• Selective disclosure (TLSN)
• Post-quantum STARK proofs (Stwo prover)
• Transparent execution without hidden operators

We do not rely on centralized custody or discretionary control over user funds or identity.

Information We Collect

Information You Provide Voluntarily

The contact form is the only place this site asks for anything. Submitting it records, in the server's log:

• Your name, email address and subject line, verbatim
• The length of your message, not its text — the body is deliberately not logged, because a contact form is exactly where somebody pastes something they should not

That log is the only place a submission goes. There is no database, no CRM and no outbound email integration, and there is no automated deletion — an entry persists as long as the server's logs do. If you would rather not have those details in a log, email us instead; the address is on the contact page and reaches the same place.

Information Recorded Automatically

Two log lines, and nothing else. There is no session, because there is no cookie to carry one.

Every request writes one access line holding the method and path, the browser's user-agent string as sent, the referring URL if the browser sent one, the requesting IP address, and the daily-rotating visitor hash the Cookies Policy describes. Nothing is derived from the user-agent string — no device type, no operating system is separately recorded — because classification happens when the logs are read, not when they are written.

Every page view additionally sends one line of page-performance measurements (how quickly the page painted, became interactive, and settled). Those carry timings only, never a URL of yours and no identifier.

Blockchain and Protocol Data

None. No settlement service is running, so this site observes no wallet address, no transaction hash and no on-chain activity. If that changes, this section changes with it — and note that an on-chain deposit is public whether or not we look at it, which the risks page covers.

Selective Disclosure with TLS Notary (TLSN)

PayMoney uses TLS Notary (TLSN) to enable verifiable computation with minimal data exposure. This allows:

• Proof of transaction or session data without full disclosure
• Field-level verification instead of complete data exposure
• Cryptographic proof of information integrity

Cryptographic Security Architecture

Stwo STARK Prover

• Settlement conditions are proven and verified with STARK proofs generated by Stwo
• Proofs are transparent (no trusted setup) and independently verifiable by anyone

Hash-Based Cryptography, and Its Two Exceptions

• The vault's protocol layer relies on hash functions rather than elliptic curves, so a future quantum adversary does not read data protected by it retroactively
• Two elliptic-curve dependencies exist outside that layer and are stated rather than implied; the security page names both, which one sits on the settlement path, and what replacing either would take
• Neither exception is part of the vault's settlement rules, so neither affects what this policy says is collected or retained

Account Abstraction

• Every account is defined by an authority policy rather than by a stored credential
• The policy is one of a fixed set: a single key, an m-of-n threshold, or guardian-based recovery
• Authority is proven by knowledge, checked by the account's own predicate before any value moves

How We Use Information

• Serve and maintain this website
• Measure page performance from real page views, so the site stays fast
• Reply to contact-form submissions and email
• Understand traffic in aggregate, including which automated crawlers reach the site

No settlement service is running, so none of the above involves transaction monitoring, fraud scoring or identity checks.

Self-Custody and User Responsibility

PayMoney is a non-custodial protocol. This means:

• Users control their private keys
• Users manage their own recovery setup
• PayMoney cannot recover lost keys or access credentials
• Security of devices and backups is the user's responsibility

Security Model and Threat Assumptions

PayMoney operates under a zero-trust security model:

• No hidden operator override exists
• All rules are enforced by cryptographic or smart contract logic
• Security depends on correct key management by users
• Compromised devices cannot be protected by the protocol

Cookies and Analytics

This site sets no cookies. Traffic is counted from server logs using a daily-rotating hash of the requesting address and browser, which is not a cookie and cannot follow a visitor between days. See our Cookies Policy.

Third Parties

One: the provider hosting the server, which necessarily handles the traffic it serves.

There is no analytics vendor, no tag manager, no advertising or consent platform, no embedded fonts, scripts or media loaded from anyone else's domain, and no CDN in front of this site. Every byte a page loads comes from this origin, which is why the counting described above had to be built into the server rather than bought in.

Data Retention

Request logs and contact-form submissions are retained for as long as the server's logs are kept. There is no automated expiry, and no separate store to purge — deleting a submission means deleting the log line. Ask and we will do it.

Your Rights

Depending on your jurisdiction, you may have the right to access your personal data, request correction of inaccurate data, request deletion of data (where applicable), restrict or object to processing, and withdraw consent where applicable.

Updates to This Policy

We may update this Privacy Policy from time to time as the protocol evolves. All updates will be posted on this page with a revised effective date.

Contact Information

PayMoney Finance — Website: PayMoney.Finance — Email: support@paymoney.finance