Summary: this service is stateless and stores nothing. No database, no accounts, no cookies, no analytics.
Request parameters — the catalog item id, order / subscription ids, optional amount and customer email, and your bring-your-own merchant-of-record API key (x-mor-key) sent as an HTTP header — are used in memory only to forward the call to the chosen platform (Paddle, Lemon Squeezy or Polar), then discarded. This server is never the seller and never holds funds; the merchant of record collects payment and remits tax. Order, payment and customer data are processed and stored by that platform under the merchant's own account. The host (Vercel) keeps short-lived HTTP logs per its privacy policy; the credential header is never logged by the application.
Because nothing is stored, there is nothing to delete or export.
Contact: reports@wishpool.app · Source (MIT): github.com/junter1989k-ai/digital-goods-mcp