Privacy Policy

1. Core Privacy Philosophy

NostrBridge is engineered with a strict Sovereign Privacy First principle. We do not collect passwords, names, physical addresses, or email addresses. Authenticated access to the platform is handled exclusively via public key cryptographic standards (NIP-07 extension signing or NIP-46 Remote Bunker sockets).

2. Data We Process & Retain

• Public Keys (npub/pubkey): Stored in our Cloudflare D1 edge database to link rule configurations and Lightning credit balances.
• Webhook Rule Definitions: Liquid formatting templates, target relay URLs, and condition filter strings created by users.
• Execution Logs: Incoming HTTP POST body payloads and relay responses are logged for up to 30 days solely for user debugging and log inspection in the dashboard.
• Encrypted Signer Keys: If you opt for personal nsec signing, private keys are AES-256 encrypted at the edge with client-side derived keys and are never stored in plaintext.

3. Third-Party Sharing

NostrBridge does not sell, rent, or trade any metadata or payload information. Transformed events are published strictly to the target Nostr relays explicitly specified in your rule configuration.

4. Open Source Transparency

NostrBridge software source code is published openly by Workouse at github.com/workouse for full public verification and independent security auditing.