Privacy

There are no analytics scripts, advertising pixels, marketing SDKs or third-party trackers in this application. No profile is built about you, and nothing is sold or shared for advertising.

Creating a payment request stores:

• the asset, network and destination address you chose
• the requested amount, if you set one
• the note, if you added one — it is visible to anyone with the link
• timestamps and an expiry

Paying a request additionally stores:

• the asset, network and amount you are sending
• the deposit address and, if you supplied one, your refund address
• the provider's reference for the conversion and the transaction hashes it reports
• the payment status and its timestamps

No passwords, no email addresses, no private keys, no seed phrases and no wallet connections. The application cannot move your funds.

You never need an account to request or pay. If you choose to sign in, sign-in is handled by Privy, using your email address or Google account. Privy verifies who you are and processes that identity under its own privacy policy.

Activity history is available only when you are signed in. We store an opaque Privy user identifier, linked to the requests you create and the payments you make while signed in, so your history follows you across devices. Your email address is shown to you in this app from your Privy session; it is not stored on our servers.

To create a conversion, the destination address, the refund address if you gave one, the assets, the networks and the amount are sent to SimpleSwap, which executes it. The provider processes that data as an independent controller under its own policies, and may run compliance checks that ask you for more information. Nothing else about you is shared.

See SimpleSwap's Privacy Policy and AML/KYC Policy.

• Hosting and database providers store the records described above and keep standard server logs, which include IP addresses.
• Public price services supply the exchange rates behind fiat estimates. Our server fetches them; no information about you is sent.

Your theme preference and display currency are kept in local storage. For requests you create, this browser also keeps a private owner key that lets it cancel them and attach them to your account if you sign in; only a one-way fingerprint of that key is stored on our servers. Activity history is not kept on your device. No cookies are used for tracking.

Requests are rate limited using the connecting IP address. It is held in memory or in a short-lived counter store only for the length of the rate-limit window, usually one minute. Error reports record what failed and on which route; they do not include request bodies, wallet addresses or credentials.

Blockchain transfers are public by design. Anyone can inspect the deposit address, the destination address and the transaction amounts on the relevant network, independently of this application.

Signing in is optional; you can sign out at any time from Settings. To ask about data held on our servers for a payment request you created, email us with the request link.

For privacy questions, contact support@linkpaynow.com.