By Design
What We Don't Know
We don't know what you sell
Content lives on your infrastructure. SatsRail sees invoices and amounts. Never content. We are a payment rail — what moves through us is not our business.
We don't know who pays
Lightning invoices are generated per-transaction. No accounts, no emails, no identity. A payment arrives. We confirm it. That's it.
We don't know what happens after
Payment confirmation triggers a key. What that key unlocks is between the merchant and the customer. We never see the content. We never see the viewer.
The Flow
How Blind Payments Work
SatsRail is in the middle for the invoice. Never for the funds or the content.
Customer requests content
The merchant's app calls SatsRail's API to create a Lightning invoice. We see the amount. Nothing else.
Customer pays over Lightning
Sats flow directly from the customer's wallet to the merchant's wallet. Peer-to-peer. SatsRail never holds funds.
SatsRail confirms payment
We verify the invoice was paid and deliver a decryption key. The key is the proof. No accounts, no sessions, no identity.
Content decrypts client-side
The key unlocks the content in the customer's browser. The decrypted content never touches a server. Sovereignty at the edge.
Non-Custodial
Your wallet. Your keys. Your sats.
SatsRail never holds, escrows, or routes funds. Customers pay directly to the merchant's Lightning address. We facilitate the invoice — the money never touches us.
No chargebacks because there's no intermediary to reverse through. No frozen accounts because there are no accounts to freeze. No seizure risk because there's nothing in custody.
Nothing to Subpoena
This isn't a privacy policy. It's an engineering constraint.
Start accepting payments on the blind rail.
No identity required. No content reviewed. No funds held.
Free plan available • No credit card required