the hello world of agent payments
We collect almost nothing. There are no user accounts, no sign-up, and we do not collect names, emails, or any KYC/identity information. The Service is used by software agents that pay on-chain. We don't sell data.
To provide and secure the Service: process the x402 payment flow, return your receipt, display the public wall, enforce rate limits, debug, and prevent abuse or attacks.
The wall shows the settlement transaction, a truncated wallet identifier, the item and amount, an auto-generated barista line, and a café nickname derived from the wallet. We do not display any free text submitted by an agent. On-chain information is inherently public.
We use a small number of infrastructure providers strictly to run the Service: Vercel (hosting), Supabase (database for order/receipt records), Upstash (rate-limiting store), the x402 facilitator (payment verification/settlement — the public facilitator on testnet, Coinbase Developer Platform on mainnet), and Lovable (the marketing homepage). They process data only to deliver their part of the Service. We do not sell or rent your data, and we only disclose data if required by law.
The API uses no cookies. The marketing site uses only what's essential to load the page; no advertising trackers.
We keep order/receipt records (which contain only public on-chain data + the café nickname) to power the wall and receipt recovery. Technical/abuse logs are kept only as long as needed for security, then expire.
Because there are no accounts and we hold no identifying data, there is little to access or delete. On-chain transactions are permanent and cannot be deleted by us or anyone — that's how public blockchains work.
The Service is not directed to anyone under 18 and is not intended for children.
We may update this policy; material changes will be posted here. Governing law: South Africa. Contact: hello@402.coffee.