What is recorded
Operational logs may include request time, path, response status, request ID, aggregate campaign labels, and settlement receipt metadata. Payment receipts may include a transaction identifier and payer address supplied by the x402 response.
What is not intentionally recorded
Webhook payloads, webhook secrets, buyer private keys, seed phrases, and account passwords are not stored by the application. Marketing analytics exclude IP addresses and full referrer URLs.
Retention
Operational backups and receipt ledgers are retained for reliability and accounting. Contact the operator through the security contact for a specific request.