PayPageWatch

Form PPW-1 · rev. 2026-10 · for PCI DSS requirements 6.4.3 and 11.6.1

Terms

Updated 9 October 2026

Who you are dealing with

PayPageWatch is run by [[ENTITY NEEDED]]. Write to [[CONTACT EMAIL NEEDED]] with any question about these terms. The law of the place where that entity is registered governs them.

The free list

Paste the address of a checkout page and the reader opens it once and lists the scripts it runs. The list is free, as often as you like. Ask it to read pages you run, or pages you have permission to check.

The watch

The watch costs $49 a month per checkout domain, billed monthly by Stripe. A signed baseline of every script on your checkout page with a justification column, then a fresh read every Monday with the changes mailed to you, and a one-line receipt in the weeks nothing changed.

The baseline is read and signed when you return from Stripe. The weekly read runs each Monday between 06:00 and 17:00 UTC. If a read fails, the mail says why, and the next Monday reads again.

Stopping the watch

Write to [[CONTACT EMAIL NEEDED]] from the address you gave Stripe. The watch stops at the end of the month you have paid for, and Stripe bills nothing further.

What a ledger claims

A ledger lists what one browser received from one address at one time, with the SHA-256 of each script. It is a list of findings for your own evidence. It is not an assessment, and PayPageWatch makes no statement that your page meets PCI DSS or any SAQ; your assessor, or your own assessment, decides that. How It Reads sets out what a read can and cannot see.

To the extent the law allows, our liability for any claim is limited to what you paid for the watch in the twelve months before it.