Legal

Privacy Policy

Last updated: October 14, 2026

1. Who we are

LirChain ("we", "us") runs lirchain.com, the dashboard and the merchant API. We decide how the personal data described here is used, and we are responsible for it.

For anything about this policy or your data, write to contact@lirchain.com. For help with your account, write to support@lirchain.com.

2. What we collect

Your account: your email address and a hash of your password (never the password itself).
Sign-up and login: the one-time code we email you, kept as a hash until it is used or runs out after 10 minutes.
Your sessions: when you log in, the browser you use (its user agent) and your IP address, so you can see and end your sessions in the dashboard's settings.
Abuse protection: your IP address, kept for about a minute to count requests against our rate limits.
Your projects: their names, webhook URLs, the Telegram bot and chat you connect, API key hashes, and what you create through them: deposit wallets, one-time payments, tracked addresses, payouts and the ids you attach to them.
Money: your balance and every change to it, deposits, payments, payouts and withdrawals, and the wallet addresses you withdraw to.
Page views: anonymous counts from Vercel Web Analytics, which uses no cookies and keeps no identifier that follows you from one day to the next. Ids in addresses are removed before anything is sent.

We do not ask for your name, identity documents or card details. Blockchain addresses and transactions are public by nature: anyone can see them on the chain, whether or not they use LirChain.

3. Why we use it

To provide the service you signed up for: your account, your projects, your balance, payouts and notifications. This is necessary to perform our contract with you.
To keep the service and your account secure: login codes, sessions, rate limits and finding abuse. This is our legitimate interest in running a safe service.
To keep records of payments and balance changes that the law requires us to keep.
To email you about your account: login codes, and notices about your plan and balance. We do not send marketing emails without asking you first.

4. Data about your customers

When you use LirChain for your own customers, you decide what you send us: the ids you attach to wallets, payments and payouts, and the addresses you track or pay. We process that data only to provide the service to you. You are responsible for having a lawful reason to share it and for telling your customers about it. Please do not put names, emails or other personal details into ids where an internal number would do.

The hosted payment and deposit pages show your customer only the amount, the address and the status. They set no cookies.

5. Who processes it for us

We share personal data only with the companies that run parts of the service for us, and only what each needs:

Vercel: hosts the website, the dashboard and the API, and provides the page view counts.
DigitalOcean: runs the background service that reads the blockchains and sends payouts and notifications.
Our database hosting provider: stores the data described above.
Resend: sends our emails, so it receives your email address and the email's content.
Blockchain node providers: we ask them about the addresses of your wallets and trackers to read their transfers. They see the addresses, not who you are.
Telegram: when you connect a bot, your notifications are sent through Telegram to the chat you chose.

6. Where it is processed

Some of these providers process data outside the European Economic Area, including in the United States. Where they do, the transfer is covered by safeguards such as the European Commission's standard contractual clauses.

7. How long we keep it

Your account and projects: for as long as your account exists. Deleting a project deletes its data. When your account is deleted, so is its data, apart from what we must keep by law.
Records of payments, payouts, withdrawals and balance changes: for as long as the law requires, even after your account is deleted.
Sessions, with their browser and IP address: until you log out or end them, and at most 30 days. Expired ones are deleted automatically.
Unused login codes: deleted automatically after they run out.
Rate limit counters: about a minute.

8. Cookies and browser storage

We only store what the site needs to work or what you ask for. There are no advertising, social media or cross-site tracking cookies, so we do not ask for cookie consent.

Name	Type	What it is for	Kept for
session_id	Cookie	Keeps you logged in to the dashboard.	30 days, or until you log out
logged_in	Cookie	Lets the public pages show Dashboard instead of Login. Holds no personal data.	As long as session_id
lang	Cookie	Remembers the language you picked in the language menu. Only set when you pick one.	1 year
code_language	Local storage	Remembers the programming language you picked in the code samples. Only set when you pick one.	Until you clear it

9. Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to limit how we use it, or to receive it in a portable format, and you can object to how we use it. Write to contact@lirchain.com from the email address of your account and we will answer within one month.

If you believe we handle your data wrongly, you can also complain to the data protection authority where you live.

10. Security

Passwords, login codes, API keys and session tokens are stored only as hashes. Connections to the site and the API are encrypted, and webhooks are signed so your server can check they came from us. No system is perfectly secure, so keep your password, API keys and webhook secrets to yourself.

11. Children

The service is for businesses and adults. It is not meant for anyone under 18, and we do not knowingly collect their data.

12. Changes

We may change this policy. When we do, we update the date at the top of this page, and for important changes we tell you by email.