Privacy

Who is responsible for your data: the operator of Paidbytap. Questions or requests: the contact address on the terms page.

Customers

You don't need an account and we don't ask for your name, email or phone. When you order we keep what was ordered, the amount, and the payment's public blockchain record (transaction and sending address), so the business can see its sales. Blockchain payments are public by nature and can't be deleted by anyone. If you ask for your receipt by email, the address is used only to send that one email (through Resend). Only a shortened form (like an***@gmail.com) is kept with the sale, so you and the business can see whether it arrived.

When you tap a shop's NFC tag we note the time, which tag, the phone type (iPhone, Android or other) and the rough city from the internet connection, so the shop can see which tags are used. We don't keep your IP address. These notes are deleted after about a year.

Businesses

We keep your shop details, menu, username, email (if you gave one), your public wallet addresses and your sales. Your password is stored only in scrambled form; we can't read it. We use this to run your shop, show your sales and work out fees.

Cookies

Only the cookies needed to keep shop owners and the admin logged in. A customer's cart is remembered in their own browser only. No advertising or tracking cookies.

Services we use

• Vercel: hosts the website.
• Upstash: stores shops and sales (servers in Frankfurt, EU).
• CoinGecko and Coinbase: coin prices (no personal data sent).
• Resend: sends receipt emails, only when a customer asks for one.
• Blockscout and mempool.space: check payments on the public blockchain using wallet addresses.

How long and your rights

Shop data is kept while the shop exists, and sales records as long as bookkeeping law requires. You can ask to see, correct or delete your data, or complain to your data protection authority. Write to the contact address on the terms page.