Privacy Policy

Version 1.0 · Effective 19 September 2026 · Last updated 19 September 2026 · hashstaz.com

In plain English: we store your username, a hash of your password, your mining address, your IP address and your chat messages. We use them to run the site and stop abuse. We do not sell your data, and we never hold your coins.

1. What we collect

Account data: your username, a salted hash of your password (we never store the password itself), and the date you signed up.
Mining data: the mining address and worker tag you use in your miner username, shares submitted, hashrate, and blocks found.
Technical data — including your IP address: IP address, session tokens, and basic request logs, used for security, rate-limiting, abuse prevention and to block abusive traffic.
Chat data: messages you post in public and team rooms, and moderation records (warnings, strikes, suspensions).

2. How we use it

To run and secure the Service: authenticate you, attribute and display mining work, operate chat and teams, detect abuse or attacks, enforce our Terms, and provide support. We use it for no other purpose and we do not sell it.

IP addresses and automated moderation. We collect and log IP addresses. We use them to run and secure the Service — rate-limiting requests, detecting spam, flooding and mass account creation, and blocking abusive traffic. Automated systems may ban an account or block an IP address, without human review and with immediate effect. If you believe an automated action was a mistake, you can appeal using the contact details on the ban notice.

We do not hold your coins. Block rewards are paid by the network directly to the mining address in your username. We never have custody of, or access to, your funds.

3. Sharing

We do not sell or rent your personal data. We may disclose information if required by law, to respond to valid legal process, or to protect the Service, our users or the public from harm or abuse. Blockchain data (addresses, transactions) is public by nature and outside our control.

4. Security

Passwords are stored using salted scrypt hashing. Session tokens are stored hashed. We apply rate limits and access controls. No system is perfectly secure; use a unique password and understand that no online service can be guaranteed.

5. Retention

We keep account and mining records while your account is active and for a reasonable period afterwards for security, abuse-prevention and legal purposes. You may request deletion of your account data by contacting us, subject to legal retention requirements.

6. Your choices

You can change your password, regenerate credentials, and leave teams at any time. You can ask us to delete your account via Discord.

7. Children

The Service is not intended for anyone under 18.

8. Changes

We may update this Policy at any time; the revised version will be posted here.