NOTHINGTO TELL.
privacy by architecture, not by promise.
Most privacy policies describe what a company does with your data. Ours is shorter: we engineered the company so there is almost no data to do anything with.
Our archive room · the drawer is the product
FOUR ARTICLES.NO ASTERISKS.
Privacy is a right, exercised quietly
You do not owe anyone a reason for wanting to pay without being profiled. Wanting privacy is not suspicious — it is the historical default, and we build for it.
Data not collected cannot leak
Every database is one breach away from being public. The only file that survives every attack is the one that was never created. That is our security model — absence.
We sell cards, not stories
No profiles, no behavioural scoring, no data resale, no pixel armies watching you read this. The product is the card. You are the customer, not the inventory.
Lawful, never curious
We comply with valid legal process and act on credible abuse — and we keep the file nearly empty either way. Cooperation does not require surveillance.
THE WHOLE FILE.
This is the complete subject file Nocturne could ever produce about you — compelled, breached or bribed. It is short for a reason.
Subject file · NTC-2026 · two entries, one optional
End of file · nothing follows
WHAT LIVES, HOW LONG.
The whole file, annotated: what each entry is for and when it dies. Next to it, the list that never enters the building — not deleted, never created.
Credential hash
Lets you back in — email + password or account token, stored one-way hashed
Balance & card state
A prepaid card needs a ledger to authorise against
Card transactions
Authorisation, 3-D Secure and disputes — processed at the issuer
Deposit txids
Credits your load, answers "did it arrive?" — nothing else
Never created
- Legal name
- Residential address
- Phone number
- Government ID
- Selfie · biometrics
- Device fingerprint
- Browsing profile
- Ad identifiers
If it isn't in the left column, it can't leak — we never held it.
The data's short life
Shown once
Card details render a single time, client-side, then are never displayed again.
Encrypted at rest
What must exist — the card vault — lives encrypted, isolated per channel.
Frozen or replaced
Freeze a card and it stops cold; mint a fresh one the moment you want a clean number — nothing to skim, nothing left behind.
All we ever hold: a funding transaction · an email — if you want receipts · nothing else
Prefer it in legal prose? The formal policy says the same thing, slower.
Privacy policyBE NOBODY'S ENTRY.
The strongest privacy feature is a file that never existed. Open an account — bring nothing, not even a name.