No. Encryption keys are derived on your side and never leave it. We hold ciphertext only. There is no master key, no recovery backdoor, and nothing readable to hand over if someone comes asking.

Card processors and banks attach your legal identity to every payment. BTC lets you stay pseudonymous from signup through renewal. We quote in USD and settle at the live rate so you always know the number.

Yes. Anonymisation and data-minimisation are core GDPR principles, and EU data residency keeps you inside the right jurisdiction. We give you the technical guarantees; your DPO gets a clean story.

We can't recover it — that's the entire design. Use the hardware-key support on VAULT and above, and keep an offline backup of your key material. Zero-knowledge cuts both ways.

Only the minimum required to run the service, anonymised, with 30-day retention. No content logging, no payload inspection, no third-party analytics.