Legal
Privacy Policy
What we collect, why, and — just as importantly — what we deliberately never see at all.
Last updated 2026-08-24
1. The short version
Self-custody, by design
Your wallet's private key is encrypted in your own browser before it's ever sent anywhere. We store the encrypted blob, never the key itself — we cannot decrypt it, recover it, or spend from your wallet even if we wanted to. Blockchain data (addresses, balances, transfers) is public by design, same as any blockchain, and pseudonymous unless you choose to link an address to your real identity yourself.
2. What we collect, if you create an account
An account is optional (the browser webminer and native tools work without one). If you create one:
- Email address and a salted, hashed password (never the password itself) — or, for Google sign-in, your Google account identifier instead of a password.
- Your wallet, encrypted — ciphertext, nonce, and key-derivation parameters. The decryption key is derived from your password in your browser and never sent to us; we only ever hold the encrypted result.
- Your public wallet address — not sensitive, this is already public on the chain itself.
- Account timestamps, and, if you enable it, a two-factor authentication secret.
3. What we never collect
- Your unencrypted private key, ever, under any circumstance.
- No analytics, tracking pixels, or advertising scripts on this site.
- IP addresses are used only transiently, in memory, to rate-limit abuse (e.g. login attempts) — never written to a database or logged long-term.
4. Third parties
- Google — only if you choose Google sign-in, to verify your identity token. We never receive your Google password.
- Email delivery (Microsoft 365) — used only to send account-verification and password-reset emails; the content is the email itself, nothing more.
- Zenodo — hosts periodic, permanent snapshots of public blockchain data (confirmed blocks, the classifier model) for citation purposes. This is chain data, never personal account data.
- Discord — our bot responds to slash commands (
/height,/hashrate,/supply) with live network statistics. It doesn't read messages, store anything about you, or request any permission beyond responding to those commands.
5. Your choices
You can use the network entirely without an account. If you have an account and want it deleted, email [email protected] — there's no self-service delete button yet, so this is handled manually for now. Deleting your account doesn't affect blockchain data already confirmed on-chain (it's public and immutable by design, same as any blockchain), only your login credentials and encrypted wallet blob held in our accounts database.
6. Contact
Questions about this policy: [email protected]. See also our Terms of Service.