Privacy

We keep as little as we can, we say where every piece goes, and you can delete your account yourself. Nothing here is hidden in a longer document.

What we store

• Your email address.
• Your sign-in sessions, with the browser's name and the address it came from, so you can see and end them.
• For each record: the fingerprint, the time, the name you gave it, and whether it is public.
• Kept copies, when you ask for them, and the text of sealed notes.
• Statements and posts.
• Handover and countersign requests, with any notes and photos attached to them.
• Team membership.
• API keys, stored only as a hash.
• Webhook addresses and delivery logs.
• An audit trail of changes to your account.
• A daily count of how often each certificate was opened, with nothing about who opened it.

What we never see

The files you record, unless you ask us to keep a copy. A fingerprint reveals nothing about the file.

What goes on the public ledger

The fingerprint, the time, and a short note saying it came from PollyPay. A handover writes the record's id and a proof of the two accounts involved; a countersign does the same. Your email address never goes on the ledger. Ledger lines are public, permanent, and outside our control.

What is public on PollyPay

Every certificate. Records you mark as public, on your page. Statements and posts. The chain of custody on a record, including handover notes and photos. Your page handle and the words you put on your page. Private records, private kept copies and your email are visible only to you and your team.

Cookies

One session cookie when you sign in. A saved theme choice if you pick one. Cloudflare's challenge widget on sign-in forms sets its own. No advertising cookies, no analytics cookies, no tracking across sites.

Email we send

Sign-in links. A notice when a new browser signs in while others are signed in. Handover and countersign requests that you ask us to send to someone. Replies to email you send us. Nothing else, and no marketing.

Who else touches your data

Cloudflare hosts PollyPay and stores kept copies. Resend delivers our email. Solana network providers receive the ledger lines. If you top up a balance with a passkey wallet, Privy holds that wallet's key in pieces that only join in your own browser. Each of these sees only what it needs to do its job.

Deleting your account

From the account page. It removes your email, sign-in methods, sessions, API keys, webhooks, page, posts and kept copies. Records, statements, handovers and countersigns already on the ledger stay there, no longer tied to you. Ask hello@pollypay.uk if you want a copy of your data first; the record list can also be exported from the Record page.

Your rights

Under UK data protection law you can ask what we hold about you, have it corrected, or have it deleted, and you can complain to the Information Commissioner's Office. Write to hello@pollypay.uk and a person answers.

Questions: hello@pollypay.uk. Abuse and impersonation: abuse@pollypay.uk. Security: security@pollypay.uk.