policy · plain language

Privacy

Sniffy is a hackathon project for the Morph x402 Agentic Payments track. This page is short on purpose — we don't collect much, and we'd rather be honest about it than pad a legal document.

What we collect

  • Anonymous page-view counts (which pages were visited, when, and roughly from where) via Vercel Web Analytics.
  • Cookieless. Vercel Analytics does not set tracking cookies and does not build a cross-site profile of you.
  • No personally-identifying data, no IP storage by us, no email, no name. We do not run third-party ad pixels.

How we treat URLs

Sniffy is wallet-aware, and a wallet address in a URL would be identifying. Before any page-view event leaves your browser, we strip the following query-string keys: address, wallet, account, tx, txHash, signature, signer, receipt. Aggregate dimensions like appId, country, and keyword are kept — they tell us which App Store flows people are exploring, not who they are.

Vercel as data processor

Page-view events are processed by Vercel under the terms of the Vercel Privacy Policy. We see only aggregate counts in the Vercel dashboard.

Wallet integration

Sniffy connects wallets through Reown AppKit, configured with features.analytics: false, features.email: false, and features.socials: false — AppKit's own telemetry, email login, and social auth surfaces are all off. Your wallet address only leaves your browser when you sign an x402 payment authorization, and it goes to the Morph x402 facilitator, not to us.

On-chain payments

Payments settle on Morph Mainnet via the official facilitator. The transaction (your address, the amount, the timestamp) is public on the Morph block explorer. That's how blockchains work — we don't have a way to anonymize it and we don't pretend to. Use a dedicated agent EOA, not your personal hot wallet.

Contact

Questions, corrections, or a request to be forgotten — open an issue on GitHub. This is a hackathon project; that's the fastest channel.