Privacy Policy

Last updated: March 16, 2026

Danke ("we", "us", "our") operates danke.nosaltres2.info and its language subdomains (thanks, merci, gracias, gracies). This policy explains what data we collect, how we use it, and your rights.

1. Who We Are

Danke is a gratitude micro-economy where users thank others by watching ads (revenue goes to the recipient) or sending Bitcoin sats via the Lightning Network. The service is operated by an individual based in the United States.

2. Data We Collect

2.1 Account Data (when you sign up)

• Google OAuth login: Google ID, display name, email address, profile picture URL
• LNURL-auth login: Public key (no email, no name — fully pseudonymous)
• Profile data you provide: Username, display name, avatar URL, Lightning address

2.2 Activity Data

• Thanks sent/received: Sender ID, recipient ID, type (ad or sats), amount, optional message, timestamp
• Ad views: Viewer ID, beneficiary ID, ad provider, start time, completion time, duration, revenue credited
• Withdrawals: User ID, amount, Lightning invoice, payment status, timestamp
• Wallet balance: Running sats balance per user

2.3 Technical Data

• IP address: Used for rate limiting only (via Cloudflare's CF-Connecting-IP header). Not stored in our database.
• Cloudflare analytics: Standard web analytics (page views, countries, browsers) collected by Cloudflare as our hosting provider
• JWT tokens: Session tokens stored in your browser (localStorage + cookie) for authentication. Expire after 7 days.

2.4 Data We Do NOT Collect

• We do not collect passwords (authentication is via Google OAuth or LNURL cryptographic signatures)
• We do not store IP addresses in our database
• We do not use tracking pixels or fingerprinting
• We do not sell or share your personal data with third parties for marketing

3. Third-Party Services

We use the following third-party services that may collect their own data:

• Cloudflare (hosting, CDN, DNS): May collect IP addresses, request metadata for security and performance. Cloudflare Privacy Policy
• Google OAuth (authentication): When you sign in with Google, Google's privacy policy applies to the OAuth flow. Google Privacy Policy
• Google AdSense (advertising): Google may serve personalized ads and use cookies. You can manage ad personalization at Google Ad Center. Google Ads Policy
• A-ADS (Anonymous Ads) (advertising): Bitcoin-native ad network. Does not use cookies or track users. A-ADS Privacy Policy
• LNbits (Lightning payments, when configured): Processes Lightning invoice payments for withdrawals. No personal data is shared beyond the invoice itself.

4. How We Use Your Data

• To provide and operate the Danke service (accounts, thanks, ad views, wallet, withdrawals)
• To display public profiles and thank-you walls
• To prevent abuse via rate limiting (using IP addresses transiently, not stored)
• To verify ad view completion and prevent fraud (anti-cheat tokens)
• To show relevant ads via Google AdSense and A-ADS

5. Data Storage & Security

• All data is stored in Cloudflare D1 (SQLite), a serverless database running on Cloudflare's global network
• Authentication uses HMAC-SHA256 JWTs with a server-side secret
• LNURL-auth uses secp256k1 ECDSA signature verification — no passwords involved
• All connections are encrypted via HTTPS/TLS
• CSRF protection via X-Requested-With header validation
• Content Security Policy (CSP) headers on all HTML responses

6. Cookies

• danke_token — Authentication session cookie (SameSite=Lax, 7-day expiry). Essential for the service to function.
• Third-party cookies — Google AdSense may set cookies for ad personalization. You can opt out via Google Ad Center or your browser settings.
• A-ADS does not use cookies.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data (via your profile settings)
• Delete your account and associated data
• Export your data
• Object to processing of your data
• Withdraw consent for ad personalization

To exercise these rights, contact us at privacy@danke.nosaltres2.info.

8. GDPR (EEA/UK/Switzerland)

If you are in the European Economic Area, UK, or Switzerland: we process your data based on legitimate interest (operating the service) and consent (for personalized ads). You may withdraw ad consent at any time. Our data processor is Cloudflare, Inc. (US), which maintains appropriate safeguards for international data transfers.

9. CCPA (California)

California residents: we do not sell your personal information. You have the right to know what data we collect, request deletion, and opt out of any future sale. Contact us to exercise these rights.

10. Children

Danke is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Data Retention

• Account data: retained until you delete your account
• Thanks and ad views: retained indefinitely (they form the public thank-you wall)
• Withdrawal records: retained for 1 year after completion
• LNURL auth challenges: deleted after 10 minutes
• Rate limit data: in-memory only, reset on server restart

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of Danke after changes constitutes acceptance.

13. Contact

For privacy questions or data requests:
📧 privacy@danke.nosaltres2.info