AnonyPay Privacy Policy

Effective: 2026-07-08

This policy explains how AnonyPay (the "Platform") collects, uses and protects your information.

1. What we collect

Category	Data	Source
Account	Email, password (hash only), display name	Provided at registration
Security	Google 2FA binding state, finance Telegram ID	Set by you in the dashboard
Integration	Merchant public key, callback URL, server IP allowlist	Set by you in the dashboard
Transactions	Deposit addresses, deposit/withdrawal/transfer records, on-chain tx hashes	Generated by the service
Logs	Access IP, time, request path, User-Agent	Generated by the service

We do not collect: your private key (never held by the Platform) or personal data of your end users.

2. How we use it

• Providing the core service — deposits, withdrawals, callbacks and the dashboard;
• Security — login verification, 2FA, anti-replay, IP allowlist checks, risk control and audit;
• Service notifications — verification-code emails, announcements, finance-confirmation Telegram messages;
• Legal compliance obligations.

We do not sell your data and do not use it for unrelated marketing.

3. Cookies & local storage

The website and dashboard use browser localStorage for: the login token (auto-expires in 2 hours), language preference and announcement read-state. No third-party advertising or tracking cookies.

4. Sharing

Information is shared only when necessary:

• Infrastructure providers (cloud hosting, CDN, email delivery), strictly to the extent needed to provide the service;
• Where required by law or lawfully requested by competent authorities;
• Other cases with your explicit authorization.

5. Retention

• Account and transaction data are kept for the life of the account; transaction records may be retained after account closure for legally required periods;
• Access logs are retained for a limited operational period and then purged.

6. Security

• All sensitive communication is TLS-encrypted; the merchant API uses RSA-2048 signing and encryption;
• Passwords are stored as irreversible hashes; key material is stored encrypted;
• Production access follows least-privilege and audit principles.

No internet transmission is absolutely secure — please guard your own credentials.

7. Your rights

You may edit your display name, callback URL, allowlist and other settings in the dashboard, and contact support to correct account data or close your account (after withdrawing your balance).

8. Changes

Amendments are published on this page; material changes are also flagged via announcements.

9. Contact

Telegram: @anonypay