Privacy

• The wallet address you submit. Needed to send the payout.
• The receipt image. It is sent to Claude to be read, and we do not store it.
• Or the receipt email, if you upload one. We check the store's signature on it, then send Claude only its subject and text, not the addresses in its headers. We do not store the email. Its text can include your name or delivery address, which Claude sees while reading it. We keep a one-way hash of the email's signature and message ID, so it cannot be claimed twice.
• A fingerprint of the receipt. A one-way hash of the image, plus the merchant, date, total and transaction number. This is how the same receipt is refused a second time without keeping the photo. A hash cannot be turned back into your image.
• What Claude read: merchant, total, currency, date, transaction number, and how confident it was.
• The payout record: the amount, the exchange rate used, and the Solana transaction signatures.
• Your IP address and a timestamp, used only to enforce rate limits.

We never ask for your name, email address, phone number, date of birth, payment details or any government ID. A receipt email you choose to upload may contain some of these; it is handled as described above. There is no account to create and no password to store. We never ask for your seed phrase or private key.

To read your receipt, to check it is genuine and has not already been claimed, to convert the total to US dollars, to send the payout, and to stop one person draining the treasury with repeated or automated submissions. Your wallet's earlier payouts decide one more thing: the $STACKD bonus starts from your second paid receipt.

We also count receipts in aggregate — how many wallets come back for a second claim, for example — to learn whether Stackd works. Those figures are totals and never identify a person or a wallet. Nothing is used for advertising or profiling, and nothing is sold.

• Anthropic (Claude API) receives the receipt image, or a receipt email's subject and text, and returns the extracted fields, either directly or through OpenRouter, which relays the request to Anthropic. Their terms govern what they do with it.
• Supabase hosts the database, in Singapore, holding the receipt records described above.
• Helius relays our Solana requests, so it sees the addresses being looked up.
• Vercel hosts the site and keeps standard server logs.
• To check a receipt email's signature we look up the store's public signing key in DNS. The lookup names the store, never you.
• Jupiter and the European Central Bank (via Frankfurter) provide prices and exchange rates. Neither receives anything about you.

Your payout is a public blockchain transaction. Your wallet address, the token, the amount and the time are visible to anyone, forever, and cannot be deleted or hidden by us or by you. Anyone who knows your address can also see everything else it holds.

If that matters to you, use a separate wallet address for Stackd.

• Receipt records (the fingerprint, extracted fields and payout details) are kept indefinitely. Deleting them would let the same receipt be claimed again.
• IP addresses are deleted automatically about a day after the submission.
• Receipt images and emails are never written to our storage at all.

Stackd sets no cookies, runs no analytics and embeds no third-party trackers. Your wallet software may store your choice of wallet in your own browser so it can reconnect. That stays on your device.

The simplest control is not submitting a receipt — nothing is collected until you do. You can ask what we hold about an address, or ask us to delete it, and we will do what is technically possible. Two limits are worth stating plainly: blockchain transactions cannot be deleted by anyone, and we keep receipt fingerprints so a deleted receipt cannot be re-claimed.

Stackd is not for anyone under 18, and we do not knowingly collect their data.

If what we collect changes, this page changes with it, and the date at the top will show it.

To ask a question or request deletion, open an issue on GitHub.