How Zaply Bet ("Zaply", "we", "us") handles your data. Short version: we collect very
little, there's no sign-up or ID check — but your betting activity is published publicly, so
please read §1.
Last updated 26 June 2026
The most important thing. To make the book verifiable, the odds we quote and every bet you
place are published as signed, public events on the Nostr network. Your selections, stakes,
odds and timing are public and effectively permanent, linked to your Nostr key. Treat your
betting on Zaply as a public record that cannot be deleted.
1 · What's public (the Nostr layer)
Published to one or more public Nostr relays and readable by anyone, signed by Zaply's key:
Odds — each market's prices.
Bet slips — for every accepted bet: the market, your selection, stake,
locked odds, potential payout, status and timestamp, tied to your Nostr public key
(npub) — pseudonymously, but anyone can assemble the full history under that key.
Your payout Lightning address is never published. Because these are signed, append-only
records distributed across independent relays, we cannot unpublish, edit or erase them once
they're out. If you want a fresh, unlinked public identity, start a new key (see §6).
2 · What stays in your browser
Zaply has no accounts in the usual sense. The following live in your browser's local storage on
your device and are not sent to us (except your key, only when you deliberately export it to
link another device):
your Nostr secret key (your account/identity — we never receive it);
your payout Lightning address (also stored server-side, see §3);
your theme preference (light/dark).
3 · What we hold (the private layer)
On our server we keep a minimal record keyed to your Nostr public key: your payout
Lightning address, your custodial balance, your bets, and basic timestamps. That's
it. We deliberately keep anything that could map a key to a person off the public layer and in this
private store.
Note: a Lightning address looks like name@domain (email-shaped) and may identify
you — to us and to your wallet provider. Use one you're comfortable associating with this
activity.
4 · What we don't collect
No name, email, phone, postal address, date of birth, or government ID. No KYC. No password.
No tracking cookies, no third-party analytics, no advertising trackers. We don't build a
marketing profile of you.
5 · Payments & third parties
To run the service we rely on a few third parties, who process data under their own terms:
Lightning wallet / node provider — processes your deposit and payout payments over the
Lightning Network. Payment details (invoices, your payout destination) pass through it.
Public Nostr relays — distribute the signed public events in §1; relay operators and the
public can read and copy them.
Sports data provider — supplies odds and results. We send them no information about
you.
Hosting / network provider — runs the server and may process standard server logs
(e.g. IP address, request metadata) for operation and security.
njump.me and any Nostr client you open — used to view public events.
6 · Your choices
Start fresh: generate a new Nostr key for a new, unlinked pseudonymous identity (note your
old public bets remain public under the old key).
Clear local data: clearing your browser storage removes the key and preferences from your
device — back up the key first, or the associated balance may be unrecoverable.
Deletion request: you can ask us to delete your private server-side record. We'll honour
it where we can, but note the limits: we may need to retain minimal data while a balance or
open bet exists, and the public Nostr events cannot be deleted by us.
7 · Retention
The private server record persists while your account is active (and is backed up as part of normal
operation). Public Nostr events are permanent and outside our control once published.
8 · Security
Your account is secured by a key only you hold — we never see your secret key, and authentication
is a signature your browser makes. That also means you are responsible for keeping the key safe.
No system is perfectly secure, and this is an experimental prototype; don't treat it as a hardened,
audited platform.
9 · Children
Zaply is not for anyone under 18 (or the local legal age). We don't knowingly collect data from
minors.
10 · International
Zaply is operated over the internet and its providers, relays and the Lightning Network may be
located anywhere. Using the service means your data may be processed in jurisdictions other than your
own.
11 · Changes & contact
We may update this policy; material changes will be reflected here. Questions or a deletion request
reach us through the Zaply website or our
Nostr profile.