Privacy Policy

This Privacy Policy explains what information Orange Pages (the “Service”) collects, how it is used, and your choices. The Service is Nostr-native: your identity is a public key, and much of what you publish is public by design.

1. Information we collect

Information tied to your identity

• Your Nostr public key, which is your account identifier. Public keys are inherently public.
• Profile details you provide or that we import from your public Nostr profile (kind:0 metadata): display name, bio, avatar, NIP-05 identifier, and Lightning address.
• Contact details you choose to publish on your listings (for example a Nostr npub or DM handle, website, email, or other field). Anything you put here is shown publicly — only include what you want public.

Content you create

• Listings, engagements, reviews and replies, reports you file, and saved favorites.

Technical and usage information

• IP address, used transiently for rate limiting, abuse prevention, and security. We do not use it to build advertising profiles.
• A single session cookie (op_session) that keeps you signed in. It is essential, HTTP-only, and not used for advertising or third-party tracking.
• A basic profile-view counter on public provider profiles.

2. How we use information

• To operate the directory and authenticate you.
• To display public profiles, listings, ratings, and revealed reviews.
• To prevent spam and abuse (including IP-based rate limiting).
• To send optional notifications as encrypted Nostr direct messages, if you have a Nostr client that receives them.

3. What is public

Your public key, listings, ratings, public profile, and revealed reviews are public. They may be viewed by anyone, indexed by search engines, cached, or replicated. Blind reviews remain hidden until both parties submit (or the grace period lapses). Your Nostr profile is already public on relays independently of the Service.

4. Third parties and data sharing

We do not sell your personal information. The Service interacts with:

• Nostr relays — public infrastructure used to import your profile and to deliver direct-message notifications. Data sent to relays is outside our control.
• A price provider (mempool.space) for the bitcoin/USD display rate. This is a generic price lookup and does not include your personal data.
• A Lightning wallet for boost invoices, where that feature is enabled.

5. Retention and deletion

You can delete your account from your account settings. Deleting your account removes your listings, engagements, reviews you authored, favorites, and reports from the Service. Note that information already published to Nostr (such as your public profile) lives on independent relays and cannot be recalled by us, and reviews that were already revealed may persist in others’ records or caches.

6. Security

We use signed, HTTP-only session tokens and standard safeguards. No method of transmission or storage is completely secure, and you are responsible for safeguarding your Nostr key.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

8. International users

The Service may be operated from, and information processed in, jurisdictions other than yours. By using the Service you consent to that processing.

9. Your choices

You control what you publish, you can edit or remove your listings and profile, and you can delete your account. For privacy questions or requests, contact us at legal@orangepages.space.

10. Changes

We may update this Policy; the “last updated” date above reflects the latest version.

See also our Terms of Service and Acceptable Use Policy.