Legal

Data and privacy

A draft: requires review by a lawyer before public launch.

What we collect

Public blockchain data: transactions, addresses, amounts. It is public by the nature of the network; we only read and correlate it.
Public server responses: we request the payment challenge (402) from paid endpoints without ever paying. Requests carry an honest User-Agent and are rate limited to one per second per host.
Open sanctions lists: OFAC SDN, OFAC Consolidated, UK OFSI.
Catalogues: public registries of x402 resources.

What we do not collect

We do not collect personal data about individuals and do not try to link wallet addresses to identities. We use no tracking cookies and no third-party analytics — there is not a single external resource on these pages.

Wallet addresses

An address is a pseudonymous identifier, but combined with other data it can become identifying. So we publish only what is already in the open network and do not enrich it from closed sources. If you believe a specific record infringes your rights, write to info@nod402.com and we will review and reply.

Access requests

If you left your email in the access form, we use it only to tell you when access opens. We do not pass it to third parties and send nothing else. Deleted on request — write to info@nod402.com.

Logs

We keep a technical log of API calls: route, response code, latency and User-Agent. IP addresses are not written to the log — they are used only in process memory for rate limiting.

We hold no fundsNo custody, no escrow, no facilitator role. Not one payment passes through us.

Same input, same answerScoring is deterministic. No model, no learning on the fly.

Objections welcomeWe show owners what drags a score down. How to dispute

We say what we can't seeSome payments move off-chain, and we say so instead of pretending otherwise.