Privacy Policy

Last updated: June 26, 2026.

Shieldz is non-custodial: we never hold your funds, and we collect as little as possible to route payments and run the service. We don't sell data and we don't build advertising profiles of your buyers.

What we collect from merchants

• Account identifier, the wallet address, or the email / Google / Telegram identity, you sign in with.
• Settlement details, the payout address (or extended public key) and the chain/token you choose to receive.
• Checkout branding, the display name and logo you set for your hosted checkout.
• Integration data, your webhook endpoint URL and any metadata you attach to invoices.

Payment & buyer data

• We don't require buyer identity. Buyers pay from any wallet, no name, account, or KYC.
• On-chain data is public. Crypto payments happen on public blockchains; we read them to detect that your invoice was paid. Shielded Zcash payments stay private on-chain by design.
• Swap refund address & tx hashes. If a buyer pays one coin to settle in another, we store the refund address they provide (so a failed swap can be returned) and the transaction hash (to attribute the payment).
• Optional customer email. If you, the merchant, attach a customer email to an invoice, we store it to send that receipt/notification, nothing more.
• IP addresses are used transiently for rate-limiting and abuse prevention. We don't use them to profile or track you, and we don't sell them.

Swaps & who we share with

• LeoKit routing aggregator, generates swap quotes and deposit addresses when a buyer pays in a different coin than you settle in.
• Swap / bridge protocols, currently NEAR, Chainflip, and Relay, public, permissionless networks that execute the swap on-chain.
• Your webhook endpoint, receives the payment events you subscribed to.
• Privacy-first analytics, we use SimpleAnalytics, which is cookieless, respects Do-Not-Track, and does not fingerprint visitors.
• No one else. We don't sell or rent data, and there are no ad or tracking networks.

Cookies

The marketing site sets no tracking cookies. The merchant dashboard uses a single session cookie to keep you signed in. That's it.

Retention & deletion

Invoices, payments, and webhook delivery logs are retained while your merchant account is active; we may purge older records from inactive accounts. The public "try it free" demo creates temporary invoices that are deleted automatically within about an hour. To request deletion of your account data, email [email protected].

Changes

We'll update this page if our practices change and revise the date above. Questions? [email protected].