Privacy and service data
The nine read-only report services are free. No account, payment or private access token is needed. Results are returned directly to your browser or API client. Keep any report you want to retain locally.
We measure page views, selected services, payment/escrow funnel steps, a fixed campaign-source category and API outcomes using a daily pseudonymous visitor identifier. This does not identify a person and does not prove that a visitor is human. Country is estimated locally using DB-IP under CC BY 4.0; proxies and VPNs can affect accuracy.
Raw IP addresses, form contents, wallet addresses, private access tokens and full URLs are not stored in activity analytics or Telegram alerts. Private activity records are retained for up to 14 days; aggregate metrics for 180 days. Private operator summaries are sent to Telegram. Do Not Track, Global Privacy Control and the homepage measurement opt-out are respected for activity recording.
Historical invoices, balances and payment recovery records from the earlier paid service are preserved for accounting and recovery. Service checkout is disabled. Optional donations use a separate NOWPayments hosted checkout; the provider handles cryptocurrency transfers under its own terms. We keep donation invoice amounts, identifiers and signed payment statuses for accounting, without granting credits or changing free access. Existing authenticated historical recovery endpoints remain private. Previously purchased reports follow their original 30-day retention; this does not apply to new free calls.
Escrow and payment requests
The optional escrow workspace uses wallet sign-in. One-time login challenges expire after five minutes and sessions after one hour. Case parties and the arbitrator can access private case evidence; evidence is plain text, capped at 64 KiB per item, and expires 30 days after submission. Expired content becomes inaccessible immediately and is removed by an hourly cleanup. Draft terms are retained for 30 days; keep a local copy for your records. Evidence is stored on the private service filesystem, outside the public website. Server administrators can access this storage; it is not end-to-end encrypted.
Case identities and payment receipts are retained for accounting and reconciliation. Payment-link memos and recipient addresses are visible to anyone who has the link. Blockchain addresses, amounts, content hashes and transactions are public and remain on-chain. Deleting local evidence cannot delete blockchain history. Never include wallet secrets or unnecessary personal information.
New escrow agreements and direct payment links have no Vino service fee. Historical escrow contracts retain their original on-chain fee terms. Donations are optional. Network fees are paid by the signing wallet. The limited Base, Polygon, Arbitrum and Ethereum escrow pilots have not been independently audited.
Contact: emathews924@gmail.com. Updated 14 October 2026.