Privacy policy

Last updated: 13 July 2026.

Controller

The controller for personal data processed by agenticweb.nl is Agenticweb, established in the Netherlands. Contact: contact@agenticweb.nl. The service has no accounts and collects no names, no email addresses and no payment-card data.

What we process, and why

Payer wallet address and transaction hash — recorded for every settled x402 payment. Basis: performance of the contract (delivering the paid call) and our legal obligation to keep fiscal records.
IP address — used transiently for per-IP rate limiting (stored only as a counter key, pruned within a day). Basis: legitimate interest (abuse and cost protection).
User-agent, endpoint, status and latency — logged per call for operations and debugging. Basis: legitimate interest (running a reliable service).
Request parameters (e.g. a queried licence plate, postcode or identifier) — processed only to answer that call and to query the relevant open-data upstream. Basis: performance of the contract (delivering the paid call). They are never stored: the call log records only the static endpoint path, and a queried plate, postcode or identifier is masked before any parameter reaches our application logs or error monitoring. We do not enrich, profile or combine them with any other source.

Retention

Call logs (wallet address, user-agent, latency): deleted after 90 days by a daily job.
Settlement ledger (amount, transaction hash, payer address): kept 7 years, the Dutch fiscal retention period for financial records.
Rate-limit counters: deleted within 24 hours.

Recipients & processors

We use Vercel (hosting), Neon (database), and — only when enabled — Sentry (error monitoring). Payment verification and settlement pass through the x402 facilitator (Coinbase Developer Platform), and settlement verification reads the public Base blockchain via an RPC provider. The interactive API reference page is served entirely from our own domain — no third-party CDN or analytics script runs on this site. We do not sell or share logged data for advertising.

Note that our hosting platform records the URL of each request in its own access log, outside our application’s control. Because endpoint parameters travel in the URL, a queried plate or postcode can appear there; those logs are short-lived and access-restricted, and we mask such parameters everywhere our own code writes them.

On-chain data

x402 payments settle on a public blockchain (Base). Your wallet address and transactions are publicly visible there by design; we cannot modify or erase on-chain data.

Your rights

Under the GDPR you can request access to, correction or deletion of your personal data, restriction of or objection to its processing, and data portability, by emailing contact@agenticweb.nl (mention the wallet address or IP concerned). You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.