Security DRAFT

Effective October 12, 2026 · Pending review by Goldstix Clearing compliance and counsel

How Goldstix protects payments

• You approve every payment. Each payment needs Face ID, Touch ID or your device passcode on your own phone.
• Codes can't redirect your money. A QR code, NFC tag or link only says who to pay. The app looks the recipient up on the Goldstix ledger and shows their name and goldtag before you approve.
• Encrypted in transit. All traffic between the app and the ledger uses TLS.

Reporting a vulnerability

If you believe you've found a security problem in the Goldstix app, this website or the Goldstix ledger, email ryan@goldstix.com with "Security report" in the subject. Include the steps to reproduce it and the impact you observed.

• We will acknowledge your report within 3 business days.
• Please give us reasonable time to fix the problem before disclosing it publicly.
• Test only with accounts you own. Don't access, change or delete other people's data, and don't degrade the service.
• We will not pursue legal action over good-faith research that follows this policy.

Machine-readable contact: /.well-known/security.txt

Contact

Goldstix Clearing, LLC · 124 Main Street, Suite 200, Canadian, Texas 79014 · (806) 323-8000