Last updated: November 3, 2026
Your privacy is important to us. BTC2G offers optional user accounts and uses Cloudflare D1 to store account and aggregate traffic records. We do not collect or store payment card data. External providers may process data according to their own policies.
We use external providers like MoonPay, Topper, and Stripe for crypto purchase and subscription flows. Resend processes the email address and verification message needed to complete a new account registration, or when a signed-in user requests another verification message. These providers may process data according to their own policies.
When you create an account, BTC2G stores your username, a one-way password hash with a unique salt, account timestamps, the email address supplied for verification, and your acceptance of the Terms and Privacy Policy. Passwords are not stored in plain text.
An email address is required for new ordinary accounts, and registration is counted as completed only after that address is confirmed. Before confirmation, BTC2G stores a pending technical account so you can sign in and request another message; it is excluded from completed-registration totals. A one-time verification token is stored as a one-way hash and expires after 30 minutes. Email verification identifies the address for account purposes; it does not by itself create a marketing subscription or activate Premium.
Administrators may protect sign-in with a passkey. BTC2G stores the passkey's public credential, usage counter, device category, backup status, and timestamps. The private key and biometric data remain with the administrator's device or passkey provider and are not sent to BTC2G.
If you use the private idea form, BTC2G stores the title, intended users, problem description, proposed solution, submission and update timestamps, review status, and any private administrator note. The submission is associated with your account. It is available only to you through your signed-in account and to authorized BTC2G administrators; BTC2G does not provide a public idea list or public idea-reading API.
Idea records are retained while reasonably needed to review the submission, operate the account feature, protect against abuse, and meet legal obligations. You may request access or deletion through BTC2G Support. Do not put passwords, wallet secrets, payment information, identity documents, or another person's confidential or personal data in an idea.
BTC2G counts aggregate page views and daily unique visitors using Cloudflare. A daily salted hash derived from IP address and browser user agent is used to prevent duplicate counts; the raw IP address and full user-agent string are not stored in the BTC2G database, and the daily hash is not intended to identify a person across days.
When a browser reports that a visit came from Product Hunt, BTC2G stores the source label producthunt, not the referring URL. A short-lived signed attribution token may be passed to the account page so a same-day registration can be counted as Product Hunt-attributed. The token does not contain the raw IP address or user-agent string.
Aggregate traffic records are automatically removed after 400 days.
The homepage email form sends your address, explicit consent version and language to the BTC2G audience service hosted on Vercel. PostgreSQL stores subscription status, consent timestamps and hashed verification tokens; Resend sends the confirmation email. The subscription becomes active only after you open the email link and press the confirmation button. You may unsubscribe using the link in that email. Confirmation is separate from account registration and does not activate Premium or the Sunday digest.
Unconfirmed requests are removed after 30 days. Confirmed consent and opt-out records are retained to operate the service and honor your choice; request deletion through BTC2G Support. Rate limits use short-lived hashed request identifiers. Sending a form does not establish delivery or confirmation.
The optional Sunday digest is an English research email. A preference request is sent to the configured BTC2G audience service, separately from Formspree. The choice is applied only after you confirm the link sent to your email address. If the service is not connected, no preference is saved. When enabled, the audience service uses PostgreSQL storage and Resend for email. It stores the address, explicit consent timestamps, the current choice, verification-token hashes and per-issue sending state. Each digest includes a narrowly scoped unsubscribe link. Provider acceptance is not proof of inbox delivery.
Unconfirmed requests are removed after 30 days. Confirmed consent and opt-out records are retained to operate the service and honor your choice; you may request deletion through BTC2G Support. An already in-flight email may arrive after an opt-out. Account registration does not enable the digest.
For access, correction, deletion, or other privacy questions, use BTC2G Support or email support@btc2g.com. We may request reasonable verification before acting on account data. Do not email passwords, passkeys, wallet secrets, payment-card numbers, or identity documents.