Privacy Policy

Last updated: August 15, 2026

The short version: no cookies, no analytics, no user database. acunya processes what you send it, in the moment, to do what you asked. What you upload goes to Arweave and is permanent and public. What you sign goes to a public blockchain that nobody, including us, can edit or erase.

Who runs acunya

acunya is an independent project in beta, operated from Spain by the operator of acunya.xyz. It is an MCP server that lets AI assistants like Claude and ChatGPT build, inspect and broadcast blockchain transactions that you sign in your own wallet.

What we process, and why

Access credentials. Requests are authenticated with an API key or a sign-in token issued by WorkOS. We verify the credential and use its identifier for rate limiting. Sign-in itself happens with WorkOS; we never see a password.
The requests you make. Wallet addresses, asset ids, metadata and transactions you send are processed in memory to build, read or broadcast what you asked for. acunya keeps no database of users or requests.
Images you upload. They pass through the server on their way to Arweave. Files over 3.5 MB travel in chunks through a temporary buffer that is deleted as soon as the upload finishes, including when it fails.
Hosting logs. Our host (Vercel) produces standard operational logs, such as IP addresses and request paths, under its own retention rules.

What we don't do

No cookies, trackers or analytics anywhere on this site.
No selling or sharing of personal data for advertising.
No profiles built about you.

Blockchains and Arweave are public and permanent

Anything broadcast to a blockchain, and any file stored on Arweave, is publicly visible and cannot be modified or deleted by acunya or anyone else. Wallet addresses are pseudonymous, but they are public, and activity linked to them is public too. Think before you sign and before you upload.

Services we rely on

acunya runs on a small set of providers, each seeing only what is needed for its part: Vercel (hosting), WorkOS (sign-in), Helius and public RPC endpoints (reading and broadcasting on-chain), and Irys/Arweave (permanent storage). Your wallet, such as PayBox, is your own relationship with its provider; acunya never holds your keys and never signs for you.

Your rights

If you are in the EU or another jurisdiction with data-protection rights, you can ask us about the data we hold (in practice, almost none), request corrections or deletion where technically possible, and complain to your supervisory authority. Data recorded on a blockchain or stored on Arweave cannot be altered or erased by anyone; that limitation is technical, not a policy choice.

Age

acunya is not directed at anyone under 18.

Changes and contact

Updates to this policy appear on this page with a new date. Questions about it can be raised through acunya.xyz.