Privacy policy

We collect as little personal data as we can. Selling a self-custody device while collecting everything about our customers would make no sense.

1. Data controller

[TODO: legal entity name], [TODO: registered address], [TODO: VAT / tax ID]. Contact: hello@sporos.io.

2. What we collect

• Order data: name, shipping address, email and phone (for the carrier), and the products ordered.
• Payment data: the Lightning invoice and its payment status. We never receive card details or access to your wallet.
• Account data (only if you create an account): email and a hashed password.
• Chat: messages you send through the chat widget are end-to-end encrypted over Nostr (NIP-17) with a key generated in your browser.

3. Why we use it (legal basis)

To fulfil your order and meet our legal obligations (invoicing, warranty), and to reply to messages you send us.

4. Who we share it with

Only with the parties needed to deliver your order: [TODO: carrier(s)], [TODO: hosting provider], [TODO: email provider] and [TODO: LNbits host].

5. How long we keep it

[TODO: retention periods (e.g. order records as required by tax law)]

6. Cookies and analytics

We use only the cookies needed for the cart, checkout and login. We do not use advertising or tracking cookies.

7. Your rights

You can ask to access, correct, delete or export your data, or object to its processing, by emailing hello@sporos.io. You can also complain to your data protection authority. [TODO: name of the supervisory authority]

8. Security

We protect your data with appropriate technical and organisational measures. We will never ask for your seed phrase, private keys or PIN.

9. Changes

We will publish any changes to this policy on this page. [TODO: last updated date]