Privacy and cookies policy
Last updated: November 5, 20261. Controller
The owner of the Vextorium project (see the legal notice) is the controller. For privacy requests, contact [email protected].
2. Data processed and purposes
- Payment data: payer wallet address, transaction identifier, service and date. Used to process payments, keep accounts, handle claims, prevent fraud and produce internal service-usage statistics. Legal bases: contract performance and compliance with legal obligations.
- Inputs sent to a service (such as text, wallet addresses, IBANs, tax IDs, VAT numbers, email addresses, URLs and domains) are used to provide the requested result and are not stored, except for temporary caches used by some public-data queries. These caches expire within minutes or hours and are deleted within one day at most. Delivered responses: for services returning public-source data, we retain the response delivered and its SHA-256 hash with the payment record as proof of delivery. We do not retain responses from services that process text, passwords, keys or personal data. When text tools are available, submitted text is processed by our local Qwen3-4B model and is not sent to external AI providers. Legal basis: contract performance.
- Technical data: server logs record the route, result and payment data, but not your IP address. Cloudflare processes your IP to deliver the service and protect it from attacks. Legal basis: our legitimate interest in service security.
3. Retention
Payment records are kept as necessary and for statutory accounting and tax-retention periods. Technical logs are deleted periodically.
4. Recipients
- Cloudflare, Inc. for network delivery, tunneling and security.
- Payment facilitators verify and settle x402 payments and receive the payer wallet address, amount and transaction: Coinbase (Base, Polygon and Solana), Circle (Optimism and Arc through Circle Gateway), and t54 (XRP Ledger).
- Lumi Trades (api.lumitrades.io): the “Tested by Lumi” badge on the home page loads from its servers, which receive your IP address and browser information when displayed.
- mcptry.com: the Vextorium server score card on the home page loads from mcptry and its server receives your IP address and browser request information when displayed.
- mcprush.com: the Vextorium MCP trust badge on the home page loads from MCPRush, which receives your IP address and browser request information when displayed.
- Telegram receives an internal payment notice containing the amount and a shortened payer address.
- Public blockchain nodes and other third-party servers receive data when required by the requested service. For example, a queried address may be sent to a blockchain node; a domain to WHOIS or DNS servers; an email domain to DNS servers to check for mail records; a URL to the site being summarized or audited; and a search term to the public source that answers it, such as Wikidata, OpenAlex, Eurostat or the World Bank.
- Public blockchains are public ledgers. Anyone can view their transactions, which cannot be deleted.
Cloudflare, Coinbase and Telegram may process data outside the European Economic Area, subject to safeguards under the GDPR, such as standard contractual clauses or the EU–US Data Privacy Framework, depending on the provider.
5. Your rights
You may request access, rectification, erasure, restriction, objection or portability by emailing [email protected]. Blockchain records cannot be changed or erased. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
6. Cookies
This website and its services do not use first- or third-party cookies for analytics, advertising or tracking, so no consent banner is shown. Cloudflare may occasionally use a strictly necessary technical cookie to distinguish people from malicious bots; it is exempt from consent under the Spanish Data Protection Agency's guidance.