← BTCPay Lite

Privacy policy

Last updated: 26 August 2026

This policy explains what personal data BTCPay Lite collects, why we collect it, and the rights you have. It applies to the website at btcpaylite.com, payment pages on pay.btcpaylite.com, and related services (the “Service”).

Use at your own risk.

1. Who we are

BTCPay Lite provides a simplified layer on top of BTCPay Server so merchants can accept Bitcoin. For privacy questions, email [email protected].

2. Data we collect

We collect the information you give us when you create and use an account:

• Account details: email address, password hash, and session cookies.
• Store details: store name, public payment slug, default currency.
• Payment destinations: on-chain xpub / derivation scheme and Lightning address.
• BTCPay connection data we create for you, such as a store-scoped API key and login email on the BTCPay instance.
• Support messages you send to us.

When a buyer opens a payment link, the checkout runs on BTCPay Server. We may store or display invoice identifiers, amounts, currency, status, and timestamps so you can see payment history. We do not ask for or store private keys or seed phrases.

Server logs may include IP address, browser type, requested URL, and error data for security and debugging. We do not run advertising trackers.

3. How we use data

• To create and operate your account, store, and payment links.
• To provision and talk to the BTCPay Server instance on your behalf.
• To send password-reset and essential service email.
• To prevent abuse, debug faults, and keep the Service secure.
• To meet legal obligations if we are required to do so.

We do not sell your personal data. We do not use it for advertising.

4. Legal bases

Where EU data-protection law applies, we process data because:

• It is necessary to perform the contract (running your account and checkouts).
• We have a legitimate interest in securing and improving the Service.
• We must comply with law, if a valid request requires it.

5. Sharing

We share data only as needed to run the Service:

• BTCPay Server, to create users, stores, invoices, and webhooks.
• Email delivery providers, to send transactional mail.
• Infrastructure operators that host this website and its database.
• Authorities, if the law requires disclosure.

Buyers who pay you interact primarily with BTCPay Server and the Bitcoin or Lightning network. Those systems have their own data handling.

6. Cookies and sessions

We use a session cookie to keep you signed in. It is essential to the Service. We do not use third-party advertising cookies or sell browsing profiles.

7. Retention

We keep account and store data while your account is open. If you ask us to delete an account, we remove or anonymize personal data unless we must keep a record for security, billing, or legal reasons. Server logs are kept only as long as needed for operations.

8. Security

We use HTTPS, hashed passwords, and access controls. No method of transmission or storage is completely secure. You are responsible for the security of your own wallets and devices. Use at your own risk.

9. Your rights

If you are in the European Economic Area, the United Kingdom, or another place with similar rights, you may ask to access, correct, delete, or export your personal data, or to object to or restrict certain processing. Email [email protected]. You may also lodge a complaint with your local data-protection authority, including the Estonian Data Protection Inspectorate.

10. International transfers

Infrastructure and subprocessors may be located outside your country. When we transfer personal data out of the EEA, we use appropriate safeguards required by applicable law.

11. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from them. If you believe we have, contact us and we will delete it.

12. Changes

We may update this policy. The current version always lives on this page, with the last-updated date above. Material changes will be reflected here. Continued use after a change means you accept the updated policy.

13. Contact

Privacy requests: [email protected]