Privacy, in plain English.
Last updated November 13, 2026
The short version: we know when your sessions started and ended and what they cost. We don't know, and never store, which sites you visited or what you watched.
How FaptoPay works
When you set up FaptoPay, your device sends its DNS lookups to our server. A DNS lookup is the request a device makes to find a website's address before connecting to it. We answer every lookup normally and never block anything. To answer, we pass each lookup on to Cloudflare's public DNS (or Quad9, only if Cloudflare is unreachable), the same way your internet provider would. They see the name being looked up and our server's address, never your name, email or account.
If a lookup matches a domain on our tracked list, we note that your session is active. That's the only thing a lookup is used for. We don't write the domain down anywhere.
To avoid charging you for a tab you forgot to close, we look at the rhythm of those lookups: a person browsing looks up new pages, a background tab repeats the same one on a timer. To spot repeats, the server keeps a scrambled, one-way fingerprint of each tracked name in memory for 10 minutes. The fingerprint can't be turned back into the name, is never saved to disk, and is forgotten when the server restarts.
What we store
- Your email address and your fee.
- For each session: when it started, when it ended, how long it lasted, what it cost, and whether it was charged.
- Payment references from Stripe, our payment processor, so we can match charges to sessions and handle disputes, plus your card's brand and last four digits so you can see which card is on file. You enter your card on Stripe's own page: we never see or store your full card number. Your email is shared with Stripe so it can send your receipts.
What we never store
- The websites or domains you look up, tracked or not.
- URLs, page titles, videos, search terms, or anything else about what you did on a site.
- Your browsing history in any form.
We also can't see page contents at all. Websites encrypt them between your device and the site, and DNS only ever sees the name being looked up.
On this website
We don't use cookies or ad trackers. The site counts a few anonymous events (a page view, a button click, a signup) and adds them to daily totals; nothing that identifies you is sent or stored with those counts. We also use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.
Who we share it with
Nobody, except the service providers we need to run FaptoPay: our hosting provider, the public DNS resolvers that answer lookups (Cloudflare, and Quad9 as a backup), and our payment processor (Stripe) once billing launches. We don't sell data and we don't run ads.
Deleting your data
Email hello@faptopay.com from the address you signed up with and we'll delete your account and session records within 24 hours. We may keep records of completed charges where the law requires it.
Questions
Write to hello@faptopay.com. A real person reads every email.