Privacy Notice

1. Who this notice covers

Paperclip Holdings LLC operates the Paperclip-hosted services described in our Terms of Use. This notice explains information handled through those services, including our pool, Ark, Lightning, node interfaces and signet. Independently operated wallets and servers may handle data differently. For privacy requests, contact contact@paperclippool.xyz. Paperclip’s official domains are paperclippool.xyz and paperclip-xbt.xyz, including the service subdomains operated by Paperclip Holdings LLC. The same terms and privacy notice apply when you access our services through either domain.

2. Information our services can receive

• Website and connection data: IP addresses, request paths, timestamps, browser or client information, errors and security events may appear in hosting, proxy or application logs.
• Mining: payout addresses, worker identifiers, submitted shares, difficulty, hashrate, connection information, reward allocations and settlement transactions.
• Ark and Lightning: public keys, transaction and virtual-output identifiers, signed protocol messages, invoices, payment hashes, amounts, fees, timestamps, expiry/recovery information, peer and channel information, and order or reimbursement records needed by the service.
• Node and Electrum requests: queried addresses or script hashes, transaction identifiers, subscriptions, broadcast transactions and connection information can reveal or link wallet activity to the server even without an account.
• Signet faucet: request identifiers, address/script fingerprints, keyed network-address hashes for rate limiting, timestamps, outcomes and transaction IDs. Web infrastructure may separately log IP addresses.
• Support: your email address, message and any diagnostic information you choose to send. Do not include secrets or unnecessary personal information.

3. Why information is used

We use service information to validate mining work and protocol requests, calculate and deliver payouts, route or settle payments, provide recovery and support, prevent duplicate payments and abuse, diagnose failures, secure systems and maintain operational and accounting records. Signing and recovery journals can be essential to preventing inconsistent transactions or loss of funds. Access is intended for people and service providers who need it for these purposes.

4. What is public or visible to others

Blockchain transactions, addresses, amounts and timing are publicly observable and cannot be erased by Paperclip. Pool dashboards and APIs expose mining and payout statistics, including address-level activity; an address is not a confidential account identifier. Lightning gossip and channel transactions can reveal node and channel relationships, while routing peers see information needed to forward payments. Do not assume that Ark, Lightning, a VPN or Tor makes activity anonymous. A public-chain record can link activity that was previously separate.

5. Cookies, local storage and wallet backups

Paperclip pages use browser storage for preferences such as appearance and chart range. Where enabled, the shared appearance cookie can persist for up to one year and is available across paperclippool.xyz subdomains. Other preferences may remain in local storage until you clear them. These are functional preferences rather than an advertising identifier. These terms and privacy pages do not load third-party analytics or advertising scripts. Wallet applications have separate local data and backup requirements: clearing browser or app data may remove recovery information. Changing or clearing a preference does not delete server records or blockchain history.

6. Hosting, counterparties and external links

Our infrastructure and communications providers process information necessary to host, secure and support the services. Network counterparties receive the data needed to relay transactions, route payments or carry out requested operations. Information may also be disclosed when required by law or reasonably necessary to address fraud, security incidents or legal claims, subject to applicable law. Following a link to GitHub, X, an external explorer or another provider sends a request to that provider, whose own privacy practices apply. Processing may occur in the United States and other locations where our providers operate.

7. Retention and security

There is no single automatic deletion period across all Paperclip services. Logs and caches have service-specific rotation or retention settings. Mining accounting, transaction records, signed payment journals, recovery state, support correspondence and backups may be retained longer for reconciliation, recovery, security, disputes or applicable recordkeeping obligations. Some protocol records must be preserved to avoid unsafe reuse of signed state. We use access controls and other safeguards, but cannot promise absolute security. Public blockchain records are outside our deletion control.

8. Your choices and requests

You can limit optional information you provide, clear site preferences, use a different backend, or stop starting new service activity. Before deleting wallet data or disconnecting, preserve backups and complete any required recovery. Email contact@paperclippool.xyz to ask about access, correction or deletion of information associated with you, or to raise a privacy concern. We may need proportionate evidence that the request concerns your information; we will not ask for your seed phrase or private keys. Requests are handled subject to applicable law and necessary security, accounting and recovery retention. We cannot remove information from public blockchains or other operators’ systems.

9. Updates

We will update the date of this notice when it changes. Material changes to data practices will be explained through the affected service as required by applicable law. This notice does not authorize undisclosed new uses of previously collected information.