Two records, and only one of them is ours.
Knock is a paid inbox with an escrow behind it, so every message here leaves two traces: a private one in Knock's database and a public one on Solana. They obey different rules. This page says which is which, in the order that matters if you are deciding whether to send something.
Last updated 9 August 2026
- The text of every message, yours and theirs. It is never published and never written to the chain.
- Your wallet address, which is also your account: signing in with it is the only way to prove who you are here.
- The X handle you claim, plus anything you type into your profile — display name, bio, price, response window.
- A session: one httpOnly cookie holding a random token. No analytics, no advertising, no third-party trackers on any page of this site.
- Ordinary server logs, including the IP address a request came from. Rate limits are counted from it so that one client cannot flood sign-in or payment routes.
Knock's operators have database access, which means they can read message text. There is no end-to-end encryption here and this page will not pretend otherwise.
- Both wallet addresses — sender and recipient — as part of the escrow account.
- The amount, the deadline and the outcome: paid out, refunded, or still waiting.
- A SHA-256 hash of your opening message. A hash is not the text and cannot be turned back into it. It exists so that neither side can later claim the message was something else.
None of this can be deleted — not by you, not by Knock, not by anyone. That is what a blockchain is. Sending a knock writes a permanent public record that these two addresses exchanged this amount at this time.
A thread is readable only by the sender and the recipient, and the API refuses anyone else. The recipient cannot see your opener until the payment is confirmed on chain — before that there is nothing to read, because nothing has been paid for.
Operators can read the database, and the backend reads a reply's length to decide whether it counts as an answer. Message text is never sent anywhere else and is not used to train anything.
Knock does not sell data, does not run ad networks, and shares nothing with third parties for marketing. The one unavoidable outsider is the RPC provider that serves the chain: your browser talks to it directly, so it sees your IP and which accounts you asked about — never your messages.
- Sign-in challenges: minutes.
- Sessions: thirty days, or immediately when you sign out.
- Unpaid drafts: a day. If a draft turns out to have been paid for, it is kept instead of deleted — losing it would strand the money in escrow.
Threads and profiles are kept while the account exists. A paid conversation is a record of a transaction, and both sides may need it.
Write from the wallet you signed in with — quoting the escrow address of any knock involved is enough to identify you — and Knock will delete your profile and the message text in threads you took part in.
Two limits, stated plainly. A thread has two people in it: your side can go, the other person's message is theirs. And the escrow records on chain stay exactly as they are — addresses, amounts, timings and the hash. Nothing anyone can do reaches them.
extractteamclaude@gmail.com