Privacy

Last updated 5 August 2026

AgentToll has no accounts, no API keys and no sessions, so there is very little about you for us to hold in the first place. This page describes exactly what exists.

What we do not collect

No sign-ups, names, emails or passwords — there is no account system.
No cookies, no analytics, no advertising or tracking scripts. The site loads no third-party code.
No private keys. Payment authorizations are signed in your own wallet or agent.
No per-caller state. The watch endpoints work from a cursor you send back, so we do not store where you left off.

What does exist

Server logs. Each API request writes one line containing the time, path, HTTP status, response time, requesting IP address and user-agent. These are kept by our hosting provider (Vercel) for a short retention window and are used only to debug faults, spot abuse and keep the service up.
Onchain payments. x402 payments settle on Base, a public blockchain. The paying address, amount and timestamp are public by nature — recorded by the network, not by us. Our /api/stats counter simply reads those public transfers.
Short-lived caches. Upstream responses are cached in memory for 15–300 seconds. Caches are keyed by the data requested (for example a token address), never by who requested it.

Third parties

Requests reach us through Vercel (hosting) and payments are verified through Coinbase's CDP x402 facilitator. Endpoint data comes from public sources such as CoinGecko, GeckoTerminal, Blockscout, alternative.me and Base RPC. Those providers see our server's requests, not yours.

Your choices

Because we hold no account data, there is no profile to export or delete. If you want a server log line removed, or have any privacy question, open an issue at github.com/tevfikefeaydin/agenttoll with the approximate timestamp.

AgentToll · agenttoll.base.eth · Terms