paiychat is operated as a brand of paiybit (paiybit.com). for the purposes of GDPR/UK-DPA, paiybit is the data controller. you can reach our data team at privacy@paiybit.com.
| data | purpose | basis |
|---|---|---|
| email + password hash | account login + recovery | contract |
| identity address (seed accounts) | verify it's you signing in | contract |
| BIB / paiybit username (optional) | cross-brand link badge | consent |
| payout BSV address | pay creator earnings on-chain | contract |
| persona content (bio, avatar, handle, rate) | display your public profile | contract |
| session metadata (letter count, sats settled, rating) | statistics, dispute resolution | legitimate interest |
| IP address + user-agent (logs) | abuse prevention, debugging | legitimate interest |
| music-mute preference, age-gate confirmation | remember your choices | consent (cookies) |
the /uniforum surface inside paiychat is a separate feature: anonymous, floor-scoped posts at uk university libraries. it has slightly different data handling because posts are persisted and public on the floor — unlike chat letters which are ephemeral.
| data | purpose | basis |
|---|---|---|
| your post body | show it to others on the same floor | consent (you typed it) |
| your rotating anonymous handle (e.g. "purple-fox") | thread your posts together within a day | legitimate interest |
| which floor + university you're posting on | scope your post to the right feed | consent |
| your underlying paiychat account id (server-only) | moderation, abuse handling, account bans | legitimate interest |
| (planned) your .ac.uk email for gating | verify you're a uk student before you post | contract / legitimate interest |
what other users see on a post: only the rotating handle (e.g. "purple-fox") and the post body. they cannot see your email, your paiychat account, your real name, or any cross-day continuity.
handle rotation: your handle is a deterministic but salted hash of (your user id, the floor you're on, today's date). it rotates each utc midnight and is different per floor. you cannot be tracked across days or across floors by your handle.
what we keep server-side: the mapping between handle and account so we can act on a moderation report. nobody outside the paiychat moderation team has access to this mapping — not other users, not the university, not advertisers.
not affiliated with any university. paiychat /uniforum is an independent product. we are not endorsed by, affiliated with, or operated under licence from the university of leeds or any other named institution. names of libraries and floors appear as descriptive geography only.
we do not sell your data to advertisers. we do not run third-party ad networks on paiychat surfaces.
we use a small number of cookies, all essential or preference-based — no tracking cookies, no Google Analytics on paiychat:
connect.sid — your login session. HttpOnly, Secure, SameSite=Lax.paiychat:bgm:muted — your music mute preference.paiychat:age:confirmed — your 18+ confirmation, so we don't re-prompt every page.paiychat_nc_* — your non-custodial wallet seed + session envelopes. local-only, never sent to our servers.under GDPR / UK-DPA, you have the right to:
email privacy@paiybit.com with your request. we respond within 30 days.
paiychat is strictly 18+. we don't knowingly collect data from anyone under 18. if you believe a minor has registered, contact us and we'll delete the account immediately.
our infrastructure is hosted in the EU (DigitalOcean Amsterdam/Frankfurt). some sub-processors (Anthropic, OpenAI, Resend, Cloudflare) may process data in the US under standard contractual clauses.
we'll update the "last updated" date above on any change. material changes will be announced via email or a prominent notice on the site.
data protection: privacy@paiybit.com
general: hello@paiybit.com