Privacy Policy
Wootoshi is a small, bootstrapped business. We don't have a legal department, and we don't want to bury important information in pages of fine print. This policy explains, in plain language, how we handle your data.
The short version: we collect only what we need to run the service, we don't sell your data, and we will never have access to your Bitcoin.
What Data We Collect
When you sign up for Wootoshi, we collect:
- Name and email address — so we can communicate with you about your account and service
- Wallet public keys (xpub) — these are needed to configure your BTCPay Server instance. Public keys allow your server to generate payment addresses. We never collect, store, or have access to your private keys.
- Payment information — billing details for your subscription (processed by our payment provider, not stored on our servers)
- Website/store URL — so we can set up and configure your BTCPay Server integration
How We Use Your Data
- Service delivery — setting up and maintaining your BTCPay Server instance
- Communication — account notifications, support, and important service updates
- Billing — processing your subscription payments
What We Don't Do
This matters, so we want to be explicit:
- We don't sell your data to anyone, ever.
- We don't share your information with third parties for marketing purposes.
- We don't access your funds. BTCPay Server is non-custodial by design. We manage the server infrastructure, but your Bitcoin goes directly to your wallet. We cannot spend, freeze, or move your money.
- We don't send marketing emails unless you explicitly opt in.
Non-Custodial Architecture
This is important enough to call out separately. Wootoshi provides managed infrastructure for BTCPay Server. We handle the servers, updates, SSL certificates, and Lightning Network configuration.
However, BTCPay Server is non-custodial. Your wallet's extended public key (xpub) is used to generate unique payment addresses, but the private keys that control those funds never leave your possession. We cannot access, move, or freeze your Bitcoin. You are always in full control of your funds.
Cookies and Analytics
We keep cookie usage minimal. We don't use cookies for advertising or tracking across websites.
- Cloudflare Analytics — privacy-focused analytics that don't use cookies or track individual users. We use this to understand traffic patterns.
- Google Analytics — used for understanding how visitors interact with our website. Google Analytics uses cookies. You can opt out using Google's browser opt-out extension.
That's it. No advertising cookies, no tracking pixels, no retargeting.
Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription, we keep your data for 30 days after cancellation in case you change your mind or need to retrieve something. After that, we delete it.
If you want your data deleted sooner, just email us and we will take care of it.
Third-Party Services
We use a small number of third-party services to run Wootoshi:
- LunaNode — VPS hosting provider where your BTCPay Server instances run. Located in Canada.
- Cloudflare — CDN, DNS, and DDoS protection for our infrastructure.
- Google Analytics — website analytics (see Cookies section above).
Each of these services has their own privacy policies. We chose them because they are reliable and have reasonable data handling practices.
GDPR (EU Users)
If you are located in the European Union, you have the right to:
- Request a copy of all data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for data processing
To exercise any of these rights, email hello@wootoshi.com. We will respond within 30 days.
Changes to This Policy
If we make significant changes to this privacy policy, we will notify you by email before the changes take effect. Minor clarifications or formatting updates may happen without notice.
Contact
Questions about this policy? Email us at hello@wootoshi.com.