Contact
Write to Orrerie Merchant.
Ask a question before you sign up, get help with a merchant account, or make a privacy request. The form on this page encrypts your message in your browser before it is sent, and a person reads it.
Ask for an invitation here
Send a message.
Name, email address, message and the tick for the privacy notice are required.
To ask for an invitation, keep the first topic and say what your business sells.
Preparing the form. It opens once this page has finished loading. If it does not open, write to hello@orrerie.com.
This form needs JavaScript
It encrypts what you type in your browser before anything is sent, and that needs JavaScript. With JavaScript off, write to us by email instead: hello@orrerie.com
What to write for
What a message can do, and what it cannot.
- A question about Orrerie Merchant, before you sign up or about how something works. The questions and answers may already have it.
- Help with your merchant account. Say which business it is, what you were doing and what the page said, word for word.
- A privacy request about the information Orrerie holds on you.
- A security weakness has its own page: report a vulnerability.
What nobody at Orrerie can do for you
Orrerie holds one key of three, so no message can make Orrerie move your money, undo a send or approve a payout. Only your own passkey approves those.
The reply address
We reply by email, and you can write by email.
A person reads each message and replies by email to the address you give. No automatic email is sent when your message arrives: the receipt on this page is the confirmation.
You can also write to us directly at hello@orrerie.com. An email is not encrypted by this page, so the same rule holds: leave passwords, files and codes out of it.
Encrypted in your browser
What the form encrypts, and what that does not cover.
- Before anything is sent, this page checks that the server's key carries Orrerie's signature, makes a fresh key of its own, and encrypts your message with AES-256-GCM. The answer comes back encrypted the same way.
- Each message is bound to this website, the route, the session, the request and its place in the sequence, so a captured message cannot be replayed or sent somewhere else.
- There is no plain fallback. If the encrypted connection cannot be set up, the page says why and sends nothing.
Where this stops
This is on top of HTTPS. It stops a proxy, a corporate TLS inspector, a browser extension that reads network traffic or a logging content network from reading your message on the way. It does not protect against the page's own code being replaced.
What is kept
What is kept, and for how long.
- Your name, email address, topic and message are stored encrypted, in a database that is separate from every wallet system.
- For 90 days. A message is then deleted by a cleanup that runs every hour. Copies kept for undoing a failed update of the website are deleted within eight more days.
- In your browser, one random reference stays in this tab until your message has arrived or you close the tab, so that sending again first checks whether it had arrived. Nothing you typed is stored in your browser.
- The limits: a name of up to 80 characters, a message of up to 2,000 characters, and 6 messages from one internet address in 10 minutes.