SpendPreflight: Privacy (v1, 2026-10-06)

What we receive: the inputs you send (domains, wallet addresses, names, 402 challenges, rules).
What we store: nothing from request bodies. To enforce the free trial we store a counter keyed by the
caller's IP address and the UTC date, deleted automatically after 48 hours.
Logs: our host (Cloudflare) keeps standard operational logs (IP, path, status, timing) under its own policies;
we use them only for reliability and abuse prevention.
Payments: x402 payments settle on a public blockchain (Base). Payer wallet addresses and amounts are public
by nature of the chain.
We don't sell data or use your inputs to train models. Aggregate, anonymized statistics (e.g. how often a
payee is flagged) may be published only after an updated notice here.
Contact: contact@spendpreflight.com