Privacy policy

Task hashes, not task contents

To issue a digest receipt, POPCORN processes a SHA-256 task hash, a caller-generated nonce, and, for a linked receipt, the hash of a preceding receipt. It generates timestamps and includes these fields in signed evidence.

The receipt protocol does not accept raw task contents. Keep your original task and schedule data with you. The witness endpoint rejects fields outside its request schema. A hash is not a guarantee of anonymity; share hashes and receipts with care.

Payments

Payments use x402 in USDC on Base. Wallet addresses and transaction information are visible during payment verification and settlement. POPCORN does not ask for your name, billing address, or payment-card details to pay for a receipt.

Base is a public blockchain. Payment transactions are public records, and POPCORN cannot erase them. Your wallet and payment infrastructure may process information under their own privacy policies.

No tracking, advertising, or data sales

POPCORN does not use advertising trackers or behavioral analytics, serve ads, or sell your data. This privacy page has no cookies, scripts, forms, or third-party embeds.

Free samples and offline verification

Free sample receipts are published examples. Verifying a downloaded sample offline collects and sends nothing to POPCORN. It needs no account, wallet, or payment. Fetching a sample from the website still makes a normal web request to the hosting provider.

Hosting and contact information

The site and service run on Cloudflare. Hosting infrastructure processes network request information to deliver and protect the service; that may include IP addresses and technical logs. This is separate from the task data accepted by the receipt protocol.

If you email us, we receive your email address and whatever you include so we can respond. Do not send private keys, credentials, or raw private task contents.

Contact

For privacy questions or requests, email violet@briarwood.ai.