Privacy Policy
Last updated: February 24, 2026
1. Our Approach
Paperwall is designed to work without collecting personal data. There are no accounts, no email addresses, no tracking pixels, and no analytics cookies. We believe you should be able to pay for content without giving up your privacy.
2. Chrome Extension
The Paperwall Chrome extension stores your encrypted wallet and payment history locally in chrome.storage.local on your device. Your private keys are encrypted with AES-256-GCM using a password you choose — this password is never stored or transmitted; it is used only to derive the encryption key locally. Decrypted keys exist only in chrome.storage.session (in memory) while the extension is active. Payment history includes the URLs and origins of sites where you made payments, the amounts paid, and transaction hashes — this data is stored locally only and capped at 1,000 records. No data is sent to Kobaru or any third party except when you explicitly approve a payment — at which point only the signed payment authorization is sent to the facilitator for on-chain settlement.
3. CLI Agent & A2A Server
The CLI agent stores wallet data, payment history, budget configuration, and receipts as local files in ~/.paperwall/ with restricted permissions (0600). Private keys can optionally be stored in your operating system's keychain (macOS Keychain, GNOME Keyring, or Windows Credential Manager). No data is sent externally except payment authorizations when you fetch paywalled content.
4. This Website
The paperwall.app website does not use cookies, analytics, or tracking scripts. It is a static site that does not collect any visitor data. No personal information is required to use any part of the website.
5. Blockchain Transactions
Payments are settled on supported blockchain networks (currently SKALE and Base). Blockchain transactions are public by nature — anyone can see the sender address, receiver address, and amount. However, Paperwall does not link wallet addresses to real-world identities. Your wallet address is pseudonymous.
6. Third-Party Services
When using the default facilitator (gateway.kobaru.io), payment authorizations are sent to Kobaru's server for on-chain settlement. The facilitator processes the transaction data needed to submit it to the blockchain — sender address, receiver address, amount, and cryptographic signature. No additional personal data is collected. Publishers who receive your payments see only your wallet address and the payment amount.
7. Changes to This Policy
If we change this privacy policy, we will update this page with the new policy and date. Since Paperwall is open source, you can always review the actual data handling in the source code.
8. Contact
For privacy-related questions, open an issue at github.com/kobaru-io/paperwall or reach out at kobaru.io.