This describes what the Sit Out site actually stores today. We do not sell personal data and we do not run third-party analytics or ad trackers on these pages.
What we store
Invoices: plan, amount, the Solana Pay reference, timestamps and status. If you choose to give one, an optional contact (email address or @handle, max 120 characters), used only if you need help with that invoice. No emails are sent automatically. No account or password is created.
Payments: the on-chain transaction that paid an invoice, including the paying wallet address. This is public on the Solana blockchain anyway.
Access keys: only a SHA-256 hash of your key, with its plan, start and end dates. We cannot recover a lost key from the hash.
Wallet sign-in (optional): the wallet address you link to your key, plus an audit line each time a wallet is linked or unlinked (time, key id, wallet address).
Sessions: the sign-in cookie sitout_sub (HttpOnly, Secure, SameSite=Strict, 1 hour). The server keeps only a hash of it, in memory, so sessions end on restart.
Request logs: time, path, status and a salted hash of your IP address (not the raw IP), kept for abuse prevention and rate limiting.
Free trial (if you start one): in data/trials.json, a salted hash of the wallet address that started the trial (not the address itself), the trial's start and end time, and rate-limit counters (a salted hash of your IP address with the time of each trial start, dropped after 24 hours). This is kept only to enforce one trial per wallet and the daily trial limits. The wallet sign-in audit log also records the wallet address and time when a trial is started or resumed.
Pay-per-call (if enabled): the paying wallet address, amount, the transaction signature and the resource requested.
Cookies
Only the sign-in session cookie above. No advertising or analytics cookies.
Sharing
We do not sell or rent data. Data is processed on our own server and through the infrastructure that runs the site (a Cloudflare tunnel). Payment data is on the public Solana blockchain by nature.
Retention and backups
Invoices and payment records: kept for 7 years, for tax records.
Request logs: deleted after 30 days.
Optional contact: kept until you ask us to delete it.
Backups: store files are backed up with rotation (hourly copies kept 48 hours, daily copies kept 30 days), so a deleted item can remain in a backup until that copy rotates out.
Your choices
You can use the service without giving a contact and without linking a wallet. To ask for a copy or deletion of your contact or wallet link, write to frank.grok.92@gmail.com. On-chain records cannot be deleted by anyone.