{"what_this_is":"The privacy policy. The short version: no accounts, no cookies, no tracking, no kept IP logs; a purchase necessarily records the public chain facts it settles with; what you sign into a public artifact is public forever, and every surface says so before you pay.","sections":[{"section":"What this store does not collect","statements":["No accounts and no signups exist here, so there is nothing account-shaped to collect: no names required, no email required, no passwords, no profiles.","No cookies, no client-side tracking, no analytics scripts, no fingerprinting. Pages are served as static-shaped HTML; what you read here is not observed.","The application keeps no IP address logs. Our host (Cloudflare) processes IPs to serve traffic, as every host does; the store's own code neither reads nor stores them.","Uniqueness is deliberately unavailable: the store cannot tell whether two anonymous visits were the same visitor, and treats that inability as a feature."]},{"section":"What a purchase necessarily processes","statements":["Paying over x402 reveals your wallet address and the settlement transaction — both already public on the chain you paid on. The store records them with the order and, where the artifact class says so, signs them into your certificate. Certificates are public, permanent, and verifiable by design; that is the product.","Inputs you attach to a purchase (a purpose line, a mandate text, a wallet to audit, a URL to check) are stored with the order and reproduced in the artifact you bought, verbatim, as the artifact's own terms state.","Payment verification and settlement run through the Coinbase CDP facilitator, which processes your payment payload to verify and settle it. The store never holds your keys and cannot move your funds."]},{"section":"What you choose to publish","statements":["The guestbook, the bell, and the visitors' register are public by their nature — signing them is publishing them, and the pages say so where you sign.","Letters to the keeper (/api/letter) are private: read by a person, never published, never quoted on any public surface. The storefront counts letters; it does not quote them.","Bounty claims record the paying and payout wallet addresses (screened against a public on-chain sanctions oracle before any payout) and your observation text, which is published on the board attributed as your claim, as the board's rules state before you file one."]},{"section":"Retention, and why some things never expire","statements":["Signed certificates, anchors, and the public corpus are permanent by design — a receipt that can vanish is not a receipt. What you bought is yours forever, and its verification stays free forever (/rights).","Short-lived state expires on its own: payment challenges in minutes, idempotency windows in about a minute, credit cash-out challenges in five minutes, unredeemed payout authorizations in seven days.","Store-credit balances idle for 90 days expire, as the credit page states."]},{"section":"Third parties this store depends on","statements":["Cloudflare hosts the store (traffic transits their network). The Coinbase CDP facilitator verifies and settles payments. Public chain RPCs are read to verify settlements. OpenTimestamps calendars receive document digests — never contents — for Bitcoin anchoring. The full dependency list, with what each can see, is published at /stack."]},{"section":"The MCP server","statements":["The MCP door (/mcp) is stateless and processes tool inputs exactly as the HTTP doors do: purchase inputs are handled as purchases, free reads as reads, and nothing about a session is retained between calls."]},{"section":"Questions, corrections, and your rights","statements":["Write the mailbox: POST /api/letter — a person reads every one. What you own after a purchase is written out at /rights. When this store gets something wrong about data or anything else, the correction is published, dated, at /corrections.","One honest limit, stated rather than buried: a signed public certificate cannot be deleted, because its permanence is what you bought and what everyone relying on it was promised. Choose the inputs you sign into one accordingly — the purchase surfaces tell you, before you pay, exactly what will be published."]}],"machine_twin":"https://scvd.store/.well-known/trust.json","effective":"2026-08-21","contact":"https://scvd.store/api/letter"}