Privacy Policy

sBTC Escrow is a non-custodial interface to a smart contract on the Stacks blockchain, operated by [OPERATOR ENTITY TO BE NAMED] ("we"). We do not ask for your name, email, or any account. We run no advertising, no analytics trackers, and no tracking cookies. Most of the data involved in using this product is public blockchain data that we index but do not control. The service is not directed at children under 18.

• No accounts, usernames, passwords, or email addresses.
• No advertising or cross-site tracking of any kind.
• No third-party analytics scripts.
• Your wallet's private keys: they stay in your wallet extension. This site never sees them and cannot transact without your explicit signature.

When you create or interact with an escrow, the transaction is recorded on the Stacks blockchain: your wallet address, the counterparty's address, the amount, the deadline, the escrow description you enter, and every subsequent action (release, refund, dispute, resolution). This data is public and permanent by design. Anyone can read it with a block explorer, and nobody, including us, can edit or delete it.

Wallet addresses are pseudonymous, not anonymous. Do not put personal information (names, contact details, physical addresses) in escrow descriptions.

We operate a database (hosted on Supabase) that stores two things:

• An index of public chain data. Copies of escrow records and events, mirrored from the blockchain so pages load fast. This adds nothing that is not already public.
• Delivery notes. If a seller marks work as delivered with an optional message, that message is stored in our database and shown to the escrow's participants. Keep personal information out of these notes; contact us to request deletion of a note you wrote.

• Local storage: your theme choice (light/dark) and dismissed banners. This never leaves your device. Nothing we store in your browser requires consent under cookie laws, which is why there is no cookie banner.
• Wallet connection: managed by your wallet extension under its own policy. Disconnecting in the app or the extension ends it.
• Notifications: if you enable escrow notifications, they are fired locally by your browser. We store no push subscription on any server, and you can revoke the permission in browser settings at any time.

Using the site causes your browser or our infrastructure to talk to:

• Vercel (hosting): standard server logs, including IP addresses, under Vercel's privacy policy.
• Supabase (database): the off-chain data described above.
• Hiro APIs (blockchain access): your browser queries chain state directly, exposing your IP to Hiro.
• CoinGecko / Coinbase (price quotes): fetched directly from your browser for USD estimates, exposing your IP to those services.

Fonts are self-hosted: no font CDN sees your visits.

Where data-protection law such as the GDPR applies to you, the operator named in section 01 is the controller. We process the indexed chain data described above on the basis of our legitimate interest in operating the service; notifications run only with your consent, which you can withdraw in browser settings.

Blockchain records cannot be deleted by anyone. For off-chain data we control (delivery notes), open an issue on GitHub or message @sbtcescrow from the wallet-verifiable account involved, and we will remove it within 30 days. Our hosting and database providers operate in the United States, so data they handle is processed there.

If this policy changes, the effective date above changes with it, and material changes will be noted in the repository's commit history, which is public.