Privacy
Local MVP policy. This is not a production privacy notice.
The local demo stores conversion signals and paying snapshots in a JSON file on this machine. Do not put live customer PII, Stripe secrets, or production payment data into this MVP.
When a hosted version exists, a real privacy policy will cover retention, subprocessors, and deletion. Widget identity tokens must be minted on your server. Never put a signing secret in browser code.