Privacy
Last updated: 6 November 2026. WondrPay is designed to know as little about you as possible.
Never leaves your device
Your wallet key, PIN and fingerprint. Biometrics are handled entirely by your phone's passkey system; WondrPay only receives a yes/no and an encryption secret it cannot read.
Public by design
Payments on Whitechain (addresses, amounts, times), your WondrPay name on ENS if you claim one, and payment requests, receipts and subscriptions on Arkiv. These are public blockchains and data networks: anyone can read them, and they can't be deleted by us.
World ID
When you verify, World ID sends us a zero-knowledge proof and an anonymous identifier (nullifier) for that action. We store the nullifier to cap how many accounts one person can verify (5 names, 5 shops). We never receive your name, face or iris data.
Our servers
Standard request logs (IP address, time, path) kept by our hosting provider for security and rate limiting. No advertising trackers, no analytics cookies, no data sales.
On this device
Local storage holds your encrypted wallet and preferences (theme, hidden balance). A tab-scoped session keeps your wallet unlocked for 15 idle minutes. Clearing site data removes all of it.