Privacy

The short version

Sendr is built so that we hold as little as possible. Your wallet address is encrypted in your browser before it reaches us, and the key to decrypt it lives only in your payment link. We don't store IP addresses, and we delete payment records after 72 hours.

What we store for each payment link

• A random link ID and the encrypted payout details (your address, its network and token, and a memo if you added one), plus the encryption IV. We can't read the encrypted part without the key in your link.
• Public details you chose to show: the token you receive, its network, an optional fixed amount, label and note.
• Settings: when the link was created, its expiry, whether it's single use or turned off, and a one-way hash of your manage link's secret, if you created one.

Links that expire are deleted 7 days after they expire. Links without an expiry are kept until you ask us to delete them.

What we store for each payment

• The routing partner's order ID and the link it belongs to.
• When it was created, its latest status, and the amount the recipient receives (for display).

Payment records are deleted automatically 72 hours after they're created. We don't store the payer's wallet, refund address, IP address or device details.

Who sees your address, and when

• Payers never do. It isn't in the payment page, the link preview or any response our servers send them.
• Our server, briefly. When a payer starts a payment, their browser sends us the key from the link. We decrypt your address in memory, create the order and discard it. It's never written to disk or logs in plain text.
• Our routing partner receives your address to deliver the payout, and screens it for compliance.

Information passed to our routing partner

To meet its compliance obligations, our routing partner receives the payer's IP address, browser user agent and time zone for each request a payer makes, along with the payout address and any refund address. We forward these per request and don't keep them. The partner's own privacy policy covers how it handles that data.

Rate limiting and regions

To prevent abuse we count requests per IP address in memory for a few minutes, using a salted hash that's never stored. We use your approximate country, as reported by our hosting provider, to block regions under sanctions. We don't record it.

No tracking

Sendr has no analytics, ads or third-party trackers. Pages send no referrer, so your link's secret can't leak to other sites.

What privacy routing can't do

Blockchains are public. Routing through two unrelated exchanges breaks the direct on-chain link between a deposit and a payout, which makes linking payer and recipient much harder, not impossible. Amounts, timing and your own habits can still reveal things.

Contact

To delete a link or ask about your data, contact us at privacy@sendr.example and include the link ID.