Privacy and terms

What Cachet knows about you

Nothing. There is no account to create, no server to hold your data, and no cookie set by this site. What follows is the audit behind that claim, so you can check it rather than take it.

What leaves your browser

Envelope identifiers

https://rpc.testnet.fastnear.com

Reading whether an envelope has been paid. The identifier is a hash. The request also reveals your IP address to that endpoint, as any web request does.

A signed transaction

Your wallet, then NEAR

Only when you pay an invoice or open an envelope. Your wallet, not Cachet, decides what it sends.

Nothing else

Nowhere

There is no Cachet server, no database, no analytics, no error reporting and no advertising code anywhere in this application.

The whole application contains a single network call, in src/lib/near.js. You can read it in the repository.

What is kept on your device

cachet.vault

Local storage

Your seed and your invoice records, encrypted with your passphrase using PBKDF2 and AES-GCM. Cachet cannot read it and neither can anyone without that passphrase.

cachet.open

Session storage

A decrypted copy held only while the tab is open, so a reload does not ask for your passphrase again. Closing the tab erases it.

cachet.theme

Local storage

Whether you chose the light or dark theme.

None of this is a cookie, none of it is sent anywhere, and none of it is used to track you. It is the storage the application needs in order to work at all, which is why there is no consent banner on this site.

Deleting your data

Cachet holds nothing to delete, so there is no request to make and nobody to make it to. Everything lives on your device, and Settings removes it.

Payments already settled on NEAR stay on NEAR. A public chain cannot be edited by us or by you. That is true of every application on it, and it is why Cachet puts only a salted hash there.

Terms

This is testnet software and it has not been audited. It moves test tokens with no monetary value. Do not use it with funds you cannot afford to lose.
It is provided as is. Under the MIT licence the authors give no warranty and accept no liability. The full text is in the repository.
Your passphrase cannot be recovered. There is no reset, because there is no account. Lose both your device and your backup and the envelopes that are still sealed cannot be opened by anyone, including us.
Cachet is not a bank, a broker or a tax adviser. A proof shows that certain payments settled. Whether a landlord, a lender or an authority accepts it is their decision, not ours.
It is not for children. Nothing here is designed or intended for anyone under 18, and no personal data is collected from anyone of any age.
You are responsible for what you invoice. Privacy is not a licence to defraud anyone, and the amounts and settlement times stay public on NEAR regardless.

This deployment

Network: NEAR testnet
Contract: cachetapp.testnet
Token: usdc.fakes.testnet
Endpoint: https://rpc.testnet.fastnear.com

The contract has no owner, no upgrade method and no pause, so these addresses cannot change under you.