Your data, purpose by purpose.

Reviewed 30 September 2026 · Responsible editor: HashrateTimes

Calculations run on your device. Loading a page or market display involves our hosting provider. Our server retrieves public market figures without forwarding your browser identity to the data providers. Contacting us by email creates a separate email record.

Who is responsible

The controller for the processing described as ours in this notice is:

Contact: info@hashratetimes.com. The legal notice identifies the operator and editorial responsibility. Please use the same contact for privacy questions and requests.

Website delivery and security

The site is hosted by Netlify, Inc. Requests to deliver pages, images, fonts and scripts expose connection information to Netlify and its infrastructure providers: the IP address, requested resource, request time, browser/protocol information and response information. These data are used to deliver the site, diagnose faults and protect the service against abuse.

Our legal basis for this essential delivery and security processing is Article 6(1)(f) GDPR. Our legitimate interests are providing a functioning website and maintaining its security. Your browser must supply the technical connection data needed to request a page; without them the page cannot be delivered.

Netlify publishes a Data Processing Agreement covering processing on behalf of customers and a subprocessor list. Its data-protection information explains that the agreement is incorporated into its terms. This does not make Netlify's separate privacy statement a substitute for this site's notice.

Netlify processes connection data for delivery, troubleshooting and security under its data-processing terms. Retention depends on the operational or security purpose and applicable legal requirements. Its agreement provides for deletion of customer data after the service ends under its deletion procedures. This does not mean every connection record is kept for the entire contract term. We do not maintain a separate visitor-log database, and no fixed deletion interval for individual Netlify visitor logs is promised here.

Private preview access

Access to a restricted review version involves Netlify account authentication and its necessary session mechanisms, governed by the Netlify privacy statement. HashrateTimes does not receive your Netlify password. This review login is separate from our calculators and is not a public HashrateTimes user account.

Calculator inputs and browser storage

Fee, satoshi-conversion and mining calculations run in the open browser page. The site code does not submit calculator inputs or results to us or to a market-data provider. Closing or reloading the page discards its in-memory calculation state; your browser may independently offer its own form restoration or history features.

HashrateTimes does not implement advertising cookies, analytics trackers, account registration, a newsletter form, checkout or visitor profiling. The application does not use local storage, session storage or an on-device database. Fonts and article images are delivered with the site. There are no embedded third-party videos or social-media widgets in this version.

This describes the HashrateTimes application. It does not claim that browser caching, essential host security or the separate private-preview login involve no technical storage. If optional tracking or storage is introduced, the applicable information and consent controls must be in place before it starts.

Market figures through our hosting service

Pages with market displays automatically request public figures from a HashrateTimes endpoint operated at Netlify. Our server obtains quotes and chart history from Kraken, Bitcoin network data from mempool.space and the Fear & Greed Index from Alternative.me. Contact, legal, privacy and missing-page screens do not make market requests.

• Kraken / Payward group: public cryptocurrency prices and chart history from api.kraken.com. See the Kraken privacy notice.
• mempool.space / Mempool Holdings S.A. de C.V., El Salvador: public Bitcoin fee estimates, block height, hashrate and difficulty. Its published privacy policy covers the website and associated APIs and states a ten-day retention period for request logs.
• Alternative.me, operated by tobieskrambs GmbH, Hamburg, Germany: the public sentiment index from api.alternative.me. See the provider's privacy information.

Netlify receives the technical connection data needed to serve your request and the selected public asset or period. The request contains no calculator inputs or wallet information. The server constructs a separate request from a fixed list of public series: it does not forward your IP address, cookies, authorisation headers, browser user agent or referring page to the market-data providers. They receive the server connection and the public series requested. Opening their external links yourself is a separate visit.

Our basis for serving these figures is Article 6(1)(f) GDPR: our interest in providing current context for educational information. The integration limits requests to public market series, avoids visitor profiles and shares short-lived public responses between requests. The international hosting safeguards described below still apply to Netlify's processing.

Displays refresh while the page is visible; choosing an asset or chart period may trigger another request to our endpoint. Pausing ticker movement does not stop requests. The local calculators remain usable with manually supplied inputs when the data service is unavailable. You can object to processing based on legitimate interests as described below.

Public responses are cached in page memory and temporarily in server memory. Quotes, history, fees and block height are reused for up to one minute; mining data for five minutes; sentiment for fifteen minutes. Expired entries are not served, but may remain in memory until replaced or the page or server instance ends. The cache contains public figures, not visitor records. Reloading clears the page's application cache, not the shared server cache. These periods are separate from hosting connection logs.

Contact and correspondence

A mail link opens your email application; it does not itself submit a message. If you contact us, we process your sender address, any name you supply, message content, attachments and delivery information to handle your enquiry, correct errors or address a rights request. Supplying a message is voluntary; without a reply address we cannot respond.

For ordinary reader enquiries our legal basis is Article 6(1)(f) GDPR: our interest in answering correspondence and maintaining accurate content. For compliance with a legal data-rights obligation, the basis is Article 6(1)(c) GDPR. Article 6(1)(b) applies only where correspondence actually concerns a contract with you or pre-contractual steps you request.

Incoming email

Incoming messages are routed through Cloudflare Email Routing (Cloudflare, Inc.) to an existing consumer Gmail mailbox. Cloudflare describes routing without retaining email content; it still processes delivery information necessary to route messages. Google handles content delivered to its mailbox under its general terms and privacy policy. For EEA users that policy identifies Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google's Privacy Help Center states that it does not act as a data processor or offer a Data Processing Agreement for consumer Gmail. This mailbox is not Google Workspace and is not covered by a Workspace processing agreement. We use the route for correspondence you choose to send; simply visiting HashrateTimes does not send your browsing activity or calculator inputs to Gmail. The website has no contact form or automated email subscription.

Replies through Resend

Resend (Plus Five Five, Inc.) is configured as an outbound delivery provider. When a reply is sent through it, Resend processes the message, recipient and delivery records. Its published standard Free/Pro/Scale retention is 30 days for email and log data, with backups retained for seven days. Its storage is in the United States even when a European sending region is selected. These provider periods do not delete a copy retained in a mailbox.

Retention and deletion

Our retention rule is to keep correspondence only while needed to handle the enquiry and necessary follow-up. Once that purpose ends, unnecessary message content and attachments are to be deleted from our active correspondence. Where a legal retention duty or a specific dispute requires a record, only the relevant record is kept for that duty or claim; ordinary reader messages are not automatically treated as tax records. These purpose-based criteria apply to our mailbox copies. Provider trash, backup and security records follow the provider's own deletion procedures and may remain after a mailbox copy is deleted.

Read the Cloudflare privacy policy, Cloudflare DPA, Google privacy policy, Resend data-protection information and Resend DPA. Please do not email private keys, recovery words, passwords, identity documents or unnecessary financial records. Ordinary email is not a suitable channel for such secrets.

Recipients and international processing

The hosting and email providers above, their relevant infrastructure providers, and any authority or adviser legally entitled to receive a necessary record may receive data for the stated purposes. Netlify, Cloudflare, Google and Resend have international operations; processing can occur outside the EEA, including in the United States. A European sending region does not establish EU-only storage.

The published Netlify, Cloudflare and Resend processing terms describe EU Standard Contractual Clauses for relevant transfers; Netlify and Resend also describe the EU–US Data Privacy Framework where applicable. Google's transfer framework information explains its mechanisms under its consumer-service privacy policy. These are provider statements, not a claim that every activity or recipient is covered by the same mechanism. Our market server does not forward visitor identifiers to Kraken, mempool.space or Alternative.me. You can ask us for information about applicable safeguards and how to obtain a copy.

Your rights

Subject to the legal conditions, you may request access and a copy, correction, erasure, restriction of processing and portability of data processed automatically on the basis of consent or contract. You may withdraw consent for the future where processing relies on it; this does not affect the lawfulness of earlier processing.

Right to object: where we rely on Article 6(1)(f) GDPR, you may object for reasons relating to your particular situation. We must then stop unless we demonstrate overriding compelling legitimate grounds or need the processing for legal claims. You may object to direct marketing at any time; this version does not conduct direct marketing.

Send a request to info@hashratetimes.com. We may ask for proportionate information to establish identity and locate the data, not a password or wallet secret. Requests are generally answered within one month of receipt; where the GDPR permits an extension, you must be informed of it and the reason within that first month.

You may complain to a supervisory authority, particularly in the EU country of your residence, work or the alleged infringement. For a private-sector controller in Bavaria, the Bavarian State Office for Data Protection Supervision (BayLDA) provides a complaint procedure.

Automated decisions and external links

We do not use your data to make automated decisions with legal or similarly significant effects under Article 22 GDPR. A calculator returning an arithmetic result is not a decision about your eligibility for a product or service. Visiting an external source or provider takes you to its separate service; its privacy information applies there.

Changes to this notice

The review date above identifies this version. Material changes to the services, purposes or data flows require an updated notice and, where legally required, a new choice before processing begins.