Last updated: February 25, 2025 This Privacy Policy explains how Lightsats collects, stores, and uses user data. Data Collection We collect minimal user data, which includes: - Public key (from LNURL-Auth) - Phone number (for SMS login) - Email (for authentication via email) - We do not collect IP addresses, device information, or analytics. Purpose of Data Collection We collect this data strictly for authentication purposes. Additionally, for Tippees, we track their onboarding process, including: - When they first see their Bitcoin gift - When they authenticate - Their progress through onboarding steps - When they withdraw their Bitcoin Data Storage & Retention Data is stored securely on fly.io. User data is retained until a deletion request is received. Data Sharing SMS authentication: Phone numbers are shared with SMS4Sats, which relays messages through Twilio. Email authentication: Email addresses are shared with ZohoMail for sending authentication magic links. We do not share data with any other third parties. We will not disclose user data if requested by law enforcement. User Rights & Control Users can request data deletion by contacting support@lightsats.com. Users cannot download their own data directly, but they may request a data export by contacting support@lightsats.com. Cookies & Tracking We do not use cookies or any tracking tools. Changes to the Privacy Policy We may update this Privacy Policy from time to time. Any changes will be posted here, and continued use of Lightsats constitutes acceptance of the updated policy. For any privacy-related questions, please contact support@lightsats.com.