about.

pottle never holds your money

pottle is open source software, built for circle's arc microgrants. it charges no fees, and the money never passes through it: every pot lives in one public contract on arc with no owner and no admin. it pays a pot to its organiser when the goal is hit, and back to everyone who paid when the deadline passes without it. nobody can change that, take money early, or send it anywhere else: not the organiser, and not pottle.

the contract: 0xB53D…0D5c on the arc explorer.

beta

pottle hasn't had a third-party audit yet, so the contract caps every pot at $1,000 or €1,000. use it for amounts you're fine with. what was checked and what's known is in the security review.

what's stored, and where

• pot links: each pot's link ends in a code made from the pot number and a secret only pottle's server has. pottle opens a pot only for its full link, so pots are unlisted: nobody finds one by trying numbers. they aren't private, though, because everything a pot shows is also on the blockchain, below.
• on the blockchain, for good and readable by anyone: pot titles, the names people type, amounts and wallet addresses. a name can't be changed or deleted later, so use one you're happy to have public.
• with dynamic (sign-in): your email, your passkey if you add one, and your wallet, which dynamic keeps so only you can use it.
• with circle, only if you buy usdc by card: what their id check asks for.
• with vercel (hosting): ordinary request logs, kept briefly.
• with google analytics: which pages are visited, counted without cookies and without any ad features.
• pottle itself keeps no accounts and no database.

the risks

• payments on a blockchain are final. money sent to a wrong address can't be brought back.
• your wallet is tied to your email. whoever gets into your email can sign in as you, so keep it safe.
• usdc and eurc are issued by circle, which can freeze an address or pause the token.
• if pottle's website ever goes away, your money doesn't: the contract keeps working, and anyone can pay out or refund a due pot from the arc explorer.

the terms, in short

pottle is free and provided as is, with no warranty. you decide what you send and to whom, and you're responsible for it. using pottle means you accept that.

contact

questions and ideas: open an issue on github. found a security problem? please report it privately.