Terms & Privacy

Subprocessors

We use the following third parties to operate the prototype. Each handles data on our behalf and is bound by their own privacy policies (linked):

• • Railway — hosts the Postgres database and Express backend
• • Vercel — hosts the Next.js frontend and edge runtime
• • Solana Devnet — public on-chain ledger that records demo transactions and balances
• • Frankfurter (frankfurter.dev) — FX rate lookups (USD ↔ MXN) called from the send/request flow

We do not use third-party analytics, marketing pixels, or advertising trackers.

Cookies & session storage

We set a single encrypted session cookie (iron-session) on successful sign-in. The cookie is HTTP-only, marked Secure in production, and carries an opaque session identifier — not your password. We do not use any other cookies or local storage for tracking.

Data retention

Account data is retained while your demo account is active and for up to 30 days after deletion as part of routine database backups, after which it is purged. On-chain transaction records persist on Solana devnet by nature of the network and cannot be deleted by us.

Your rights

You can request the following at any time:

• • Access — a copy of the data we hold on you
• • Correction — fix incorrect personal data
• • Deletion — wipe your demo account
• • Portability — export your data in a machine-readable format

Email inquiries@barter.sh with the request.

Security

Passwords are hashed with bcrypt (10 rounds) before storage. Traffic between your browser, the API, and the on-chain RPC is encrypted in transit (TLS). The demo custodial wallet's secret key is stored encrypted in the database; the demo operator has technical access to it by necessity, and you should never use a real-world keypair as a demo account. The prototype is not penetration-tested or audited — do not treat it as production-grade security.

Children's data

The prototype is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, email inquiries@barter.sh and we will delete it.

International data transfers

The Postgres database and frontend are hosted in regions selected by Railway and Vercel (typically the United States). Your data may be transferred to and stored in these regions. By using the prototype you consent to this transfer.

Breach notification

If we discover a security breach affecting your account, we will notify users via the dashboard or email within a reasonable timeframe (target: 72 hours) where contact information is available, along with steps to mitigate impact.

Updates to this Privacy Policy

We may update this document as the prototype evolves. Material changes will be reflected in the “Last updated” date at the top. Continued use after a change constitutes acceptance.

User-generated content

You retain ownership of any content you submit (memos, display names, avatars). By submitting, you grant us a non-exclusive, worldwide, royalty-free license to display that content within the prototype as needed for it to function — including to other users you transact or friend with. If you delete your account, we stop displaying your content within the dashboard, but on-chain memos persist on devnet by nature of the network.

Account deletion

Demo accounts can be wiped at any time from the operator side. On-chain data persists on devnet by nature of the network, but is decoupled from your handle once the account is deleted. Email inquiries@barter.sh for deletion requests.

Termination

We may suspend or terminate your access at any time, with or without notice, for violations of these terms or operational reasons (including resetting the demo entirely as part of regular maintenance). You may delete your own account at any time per the section above.

Liability

The prototype is provided as-is, without warranty of any kind, express or implied. By using it you agree that the operators are not liable for any loss, downtime, or other harm arising from your use of the demo, including but not limited to data loss, devnet network incidents, FX rate inaccuracies, or reset events.

Indemnification

You agree to indemnify and hold harmless the operators of the prototype, and any contributors, from any claim, damage, liability, or cost arising from your misuse of the demo, your violation of these terms, or your violation of any third party's rights.

Modification of terms

We may revise these terms as the prototype evolves. Material changes will be reflected in the “Last updated” date. We will make reasonable efforts to surface notable changes in the dashboard. Continued use after a change constitutes acceptance.

Dispute resolution & governing law

Any dispute arising from your use of the prototype will be addressed informally first by emailing inquiries@barter.sh. If unresolved, disputes are governed by the laws of the operator's jurisdiction, without regard to conflict of law principles. Use of the prototype constitutes consent to this jurisdiction.

Severability & entire agreement

If any clause of this document is held unenforceable, the remaining clauses stay in effect. This document — along with any notice surfaced in the dashboard — is the entire agreement between you and the operators with respect to the prototype, and supersedes any prior version.