Bounty: privacy
Bounty is a read-only connector for AI assistants. It reads the rewards declarations that stores
publish in the Open Bounty Schema, the open-source standard for stating what a purchase earns, and
searches the Bounty index of stores where a purchase earns. This policy covers the Bounty
connector at https://api.nctr.live/mcp/bounty and the hosted checker it uses,
https://api.nctr.live/check.
What Bounty receives
Only what a tool needs: the store domain you ask about, a product page address if you ask about a product, or the store name or keyword you search for. Bounty does not receive your conversation, your name, your email, your Claude account or anything else from the assistant you use.
What Bounty does with it
For a store, Bounty fetches that store's public rewards declaration and home page, checks the declaration against the Open Bounty Schema, and returns the result. For a search, it matches your words against the names in the index and returns up to ten stores.
The index is an open registry. When a check finds a valid declaration on a store's own website, that store's domain and the public fields of its declaration (program name, earn sentence, who publishes it) are added to the index, so other people can find the store in a search.
What is stored, and for how long
- Each store's check result is cached for 5 minutes, keyed by the store's domain, so repeated questions are fast. The cache holds the store's public data, not who asked.
- A store in the open registry stays listed while its declaration keeps checking valid. It's removed when a check reaches the store and finds no valid declaration, and it lapses after 90 days without a fresh check. The registry holds the store's public information only, never who asked.
- To apply per-minute rate limits, the connector session identifier or the network address a request comes from is counted for one minute and then discarded.
- Bounty keeps no request logs and no history of who asked about which store or what anyone searched for.
Sharing
Bounty sells nothing and shares nothing. Requests pass through our hosting provider, Cloudflare, which processes them under its own privacy policy. Bounty sends your request to no other party. A store you ask about receives an ordinary request for its public files, from our server, not from you.
Accounts and cookies
None. Bounty has no sign-in and sets no cookies.
Children
Bounty is not directed at children and collects no personal information from anyone.
Changes
If what Bounty receives or keeps changes, this page changes first, with a new effective date.
Contact
Questions about privacy or security: hello@butterflystudios.live.