Privacy

Version of 5 November 2026

What data

Merchants: email, name, language, time zone, display currency; the Telegram ID when Telegram is connected.
Sessions: IP address, browser and activity time, to show the session list and protect sign-in.
Shops: name, description, deposit and payout addresses, webhook settings.
Buyers: CoinsPay asks them for no personal data; a payment is visible only as a blockchain transfer.
To spot a payment right away, the payment page checks the balance of its address directly with the public node publicnode.com (Allnodes). The node sees the payment address and the buyer’s IP address.
To keep bots out, Cloudflare Turnstile checks sign-in, sign-up, password reset and the first chat message. It sees the IP address and browser data.

To accept payments, make payouts, send notifications and sign-in emails, protect the dashboard and answer requests.

Expired sessions are deleted automatically, webhook and Telegram logs after a month. Payment and payout records are kept while the shop exists.

The site uses only necessary cookies: the sign-in session and request forgery protection. Language and theme are remembered in the browser.

You can ask for a copy of your data, or have it corrected or deleted, by writing to support@coinspay.app.

Signing up takes a minute and setting up a shop about five more. Connecting is free.