Privacy Policy

This policy covers bruteforcebitcoin.com. Questions about it go to hello@bruteforcebitcoin.com.

Everything the board does happens on your device. Every private key it guesses, every address made from it, and the list of funded addresses it compares them with are held in the page's memory and nowhere else. They are never written to storage, never sent anywhere, and gone when you close the tab.

The same goes for the key you draw on the Spot Check page. The site never asks you for a key, a seed phrase or a password, and never will.

The site's security policy lets your browser talk to three places and blocks everything else.

• blockstream.info, a public block explorer this site does not run, receives one Bitcoin address, never a key, each time you press a Check button or the board needs to confirm a possible match. Your browser asks them directly, so they see your IP address, as any website you visit would. Their own privacy policy covers what they do with it.
• This site's counter receives one number about every 15 seconds while the board is running, and once more when you leave: how many keys your browser has tried. To stop one visitor flooding the total, the counter keeps a salted hash of your IP address for ten seconds, then forgets it. The raw address is never stored, and the total is a single number with nothing attached to it.
• The site's page-view counter counts page views: which page, the site that sent you here (its domain only), whether it is the first page of your visit, and any campaign tags in the address you arrived on. Your browser's user agent is read once to file the view under mobile or desktop, then dropped. Your IP address is not read. Nothing is sent at all if your browser has Do Not Track switched on.

The site itself is served by Vercel. Like any web host, its servers process your IP address and the details of each request in order to deliver the page and keep the service secure.

The public pages set no cookies. The page-view counter keeps two entries in your browser's session storage, a note that this visit has been counted and the campaign tags from the address you arrived on, and the browser deletes both when you close the tab. Nothing identifies you, so there is no consent banner to click through.

The fonts and every image are served from this site, so loading a page does not tell anyone else you visited.

• No accounts, sign-ups or email lists.
• No advertising, and no third-party analytics or tracking scripts.
• No selling, sharing or renting of anything about you, because nothing about you is kept.
• No key, address or session figure is ever tied to you.

You can read every page without pressing Start, in which case no count is sent. You can skip the Check buttons, in which case blockstream.info hears nothing from this site. Switching on Do Not Track stops the page-view count. Closing the tab stops everything.

If what the site sends changes, this page changes first, with a new date at the top.

Brute Force Bitcoin, hello@bruteforcebitcoin.com.