# ScopeProof Privacy

ScopeProof is designed around structured minimum-necessary metadata. Do not send passwords, API keys, cookies, bearer tokens, payment credentials, private keys, raw prompts, or arbitrary request bodies. ScopeProof rejects common credential fields and secret-like material. Paid-payment state stores only the minimum data needed for replay protection, settlement recovery, and receipts. Davisville Labs commerce analytics are fail-open and privacy-minimized and do not require raw prompts, request bodies, credentials, or buyer IP addresses.