Privacy
The catalog and product preview have no wallet connection or submission forms. For the digital ware, a buyer's x402 client sends signed payment authorization to the seller and Coinbase facilitator. Confirmed transaction addresses, amount and receipt are public on Base. The private order journal retains payment bindings, status, receipt and a hash of the recovery key; it does not retain the raw recovery key or signed payment header. Rate limits process the connecting IP transiently and store only a hash with a private monthly salt in minute counters. Raw IPs are not stored by the commerce journal; minute counters expire within two minutes and previous monthly salts are discarded. The admission index retains order IDs and payment/recovery hashes so existing purchases can recover without using new-purchase capacity. Preserve your key privately, never email it. Customer files used with the offline kit are never uploaded. Cloudflare hosts the site, processes connection data and may insert traffic-measurement code into served pages. Cloudflare’s privacy practices apply to that processing. Marketplace links lead to external sites with their own privacy practices. Email inquiries go directly to Ben’s Gmail inbox and are processed by that email provider. Include the task, proposed deliverable, completion criteria, timing and budget initially; never send passwords, access codes or payment credentials. Ask Ben by email about removal of your inquiry. For card purchases, a Stripe-issued card SPT is sent transiently to the merchant and Stripe; the merchant journal retains only a credential hash, recovery-key hash, order bindings, sanitized status and receipt. It does not retain the raw SPT, Payment credential, recovery key or card numbers. Stripe and the buyer issuer process their own payment records. Never email or publish a token, credential or recovery key.
Catalog JSON · Marketplace references
Interface Consistency Check
The Interface Consistency Check stores the prepared JSON report privately before payment, discards raw submitted contents after preparation, and retains input/report digests, a recovery-capability hash and sanitized payment metadata. Unpaid reports expire after 24 hours; the purchased-report recovery period is 30 days after confirmation. Unresolved payment records remain until reconciled. Compact audit markers remain within fixed storage capacity. No capability or report is a public static asset. Submit public documents only; never submit secrets.
Leave a trace guestbook
The separate guestbook accepts a note, purpose, optional display name and optional HTTPS profile link. Nothing is public until the owner approves it. Approved notes, names and links are public and may be copied by others. Pending and hidden content is private to the authenticated owner. No account, wallet, payment, email address or upload is required.
Notes remain until owner removal. Removal redacts the note, name and profile link; a receipt ID, content digest, purpose, date and noncontent moderation audit remain to prevent duplicate restoration and preserve the moderation record. Storage has fixed capacity. Abuse prevention keeps only a privately salted daily IP hash and bounded counters, scheduled for deletion after 48 hours; provider alarm retries may delay cleanup. The guestbook does not retain raw IP addresses or user agents and does not fingerprint visitors or fetch submitted profile URLs. Cloudflare separately processes hosting connection data.
The enhanced form keeps an unresolved submission in this browser tab’s session storage for exact retries until receipt is confirmed. Do not use it for private information, credentials or private task details. Contact Ben privately about removal; include the note date or receipt ID, never credentials. A guestbook note is not a paid-job submission or a promise of compensation.
An attempt ID identifies an unconfirmed submission. A confirmed receipt records that the note was received for review; it does not check its current publication status. Review, publication and a personal reply are separate outcomes, with no guaranteed publication or reply. A saved receipt does not perform a live status lookup, and its ID is not proof of identity or authorization.
Unresolved attempts are kept only in this browser tab’s session storage for exact retries. Closing the tab or losing its session can lose that copy. Confirmed receipt Copy/Save controls act only when you choose them and omit the note, name and profile. You decide whether and where to save the receipt; saved files and clipboard copies are outside the form’s session storage. No public lookup of pending notes is provided.
Private product questions, guestbook receipt help and removal requests use Ben’s existing email. Provide the minimum context needed: a page link, approximate date and attempt ID or receipt if available. Do not send credentials, signed payment payloads or private purchase recovery keys.