Privacy statement

coiners.club is the controller for the personal data described here, as meant in the General Data Protection Regulation (GDPR). You can reach us at the address under Contact.

• Your email address. It is only added to our newsletter list after you click the confirmation link we send you.
• That you are verified, and the date you joined. This is the date your address was added to the list.
• One-time verification codes. They expire after 30 minutes, are not linked to you and are deleted automatically.

• Names
• Bitcoin addresses
• Balances or amounts
• Signatures
• Documents, screenshots or API keys

Verification happens once. The addresses and balances you verify are thrown away as soon as the check is done. Your email address never appears in our logs or error reports.

You sign a one-time message with each address that holds your bitcoin. We check the signatures and add up the confirmed balances of those addresses. When they hold at least one whole bitcoin together, we send a confirmation link to your email address. The link is valid for 24 hours.

We accept that someone could let a friend sign for them. Preventing that would mean storing addresses, and that is a bigger risk.

• Verification and the newsletter: your consent, which you give with the checkbox when you sign up. You can withdraw it at any time.
• Protecting the website against abuse: our legitimate interest in keeping the verification safe.

• Your email address stays on the list until you remove it. When you only unsubscribe, it stays on the list marked as unsubscribed, and you receive no more newsletters.
• An email address you enter but never confirm is not stored by us. It only travels inside the confirmation link, which stops working after 24 hours.
• One-time verification codes are deleted within a day after they expire.

We use no analytics or tracking cookies. The website sets a session cookie and a security token cookie, which are needed to send forms safely, and a cookie that remembers the colour scheme setting. The session stays in that encrypted cookie in your browser, not on our servers.

To limit how often someone can try to verify or request emails, we count attempts per IP address. We only store a keyed hash of your IP address for this, which expires after at most an hour.

• mempool.space and blockstream.info: we look up the balance of each address you verify with mempool.space, and with blockstream.info when mempool.space does not answer. These public services can see which addresses are checked.
• Reown (WalletConnect): when you use the connect wallet button, the connection with your wallet runs through their relay. The manual route does not use Reown.
• Laravel Cloud: our hosting provider runs the website and processes your IP address to deliver its pages.
• Resend: our email provider stores the newsletter list and sends our emails. Resend stores data in the United States, covered by a data processing agreement and standard contractual clauses.

Partners never receive email addresses. Offers reach members through codes or links from coiners.club.

Every newsletter contains an unsubscribe link. To remove your email address from our list completely, use the leave the list page.

You have the right to access, correct and delete your personal data, to restrict or object to its use, to receive it in a portable format and to withdraw your consent. Email us to use these rights. Because we store so little, removing your email address with the leave page usually covers everything.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Questions about your privacy? Email [email protected].