privacy by design

machines.cash protects sensitive user data with strong client side encryption. all user text fields are encrypted on your device before they are sent anywhere.

we use aes 256 gcm with random initialization vectors. this ensures every encrypted field is unique and cannot be correlated. only ciphertext is sent to our api and database. this means our servers never see or store your plain text information.

even if someone accessed the database, they would only see encrypted blobs with no ability to decrypt them without your keys. this is the highest standard for end to end protection of user data.

machines cash does not collect, store, or process your kyc data itself.

all identity verification is handled entirely by regulated third party kyc providers. when you complete kyc, your information is submitted directly to those providers and never passes through or resides on machines cash servers.

this means:

machines cash never sees your raw identity documents or personal verification data.

no kyc data is stored in machines cash databases.

compliance checks are performed by specialized, licensed third parties that meet regulatory and security standards.

machines cash only receives a confirmation result from the kyc provider, such as approved or rejected, which allows us to enable account features without holding sensitive identity information.

by separating kyc from our core infrastructure, we reduce data exposure and ensure your personal information remains isolated with providers designed specifically for secure identity verification.

most card providers reuse one account for everything. that links your wallet, full history, and spending together.

machines creates a new deposit address for each deposit. each deposit stays isolated. your main wallet and history stay hidden.

machines creates a new withdrawal address for each withdrawal. each withdrawal stays isolated. your main wallet and history stay hidden.