What we collect and why

Who controls this site

BTCorMSTR is operated by an individual who prefers to stay anonymous. There is no registered company and no physical office address. For data-related enquiries, the site operator can be reached via the publicly available domain registrant contact in WHOIS, or via any contact details posted on the About page.

Analytics — Plausible

This site uses Plausible Analytics, a European privacy-first service operated from the EU. Plausible receives:

• Page URL and HTTP referrer
• Browser name, version, and device type (aggregated)
• Country derived from IP address — the IP itself is never logged or stored by Plausible
• Named feature events by name only: calculator_run, portfolio_created, csv_import, share_card_generated, poll_vote. No amounts, portfolio contents, lot details, or personal identifiers are ever attached to these events.

Plausible is cookieless. No cross-site tracking occurs. Data is processed in the EU under Plausible's standard terms. See plausible.io/privacy for their full policy.

Reader polls — IP address processing

To allow one vote per person per poll per day without requiring an account, the server briefly processes your IP address. It is immediately converted to a one-way daily hash (SHA-256 with a salt that rotates at midnight UTC). The raw IP address is never written to any database or application log. The hash is not reversible to an IP. When the daily salt rotates, the derived identifier becomes permanently meaningless.

Under EU data-protection guidance (EDPB), hashing an IP address is treated as pseudonymisation rather than full anonymisation. We process it on the basis of legitimate interest (preventing duplicate votes in our reader sentiment surveys). You may opt out at any time simply by not voting.

Portfolio analyzer

The portfolio tool runs entirely in your browser. No transaction, price, quantity, date, or portfolio summary is ever sent to any server. Nothing is stored in a database. Share links carry only aggregate percentage returns — never individual lot details, amounts, or dates. Your data is saved only to this browser's localStorage, and the “Clear my data” button wipes it instantly and completely.

Server and infrastructure logs

Standard web-server and CDN infrastructure automatically logs connection-level metadata (IP address, timestamp, URL path, HTTP status code) for security and operational purposes. These logs are controlled by the hosting provider (Replit) and are not used by this site for analytics or advertising. Retention follows the provider's default policy. This site's application code does not write IP addresses to any application-level log or database.

Cookies and local storage

No analytics or advertising cookies are set. The only browser storage this site uses is:

• localStorage — your portfolio transactions, calculator preferences, and poll-vote guard (a simple flag to prevent a second vote in the same session). This data never leaves your browser.
• Session cookie (admin users only) — an httpOnly, HMAC-signed session cookie is issued to authenticated admin users only. It is not set for general visitors.

Your rights (EEA and UK visitors)

If you are in the EEA or UK, you have rights under GDPR and the UK GDPR, including the right to access, rectify, erase, restrict, or object to processing. Because this site does not store personal data tied to a recoverable identifier (poll hashes are anonymous after salt rotation; portfolio data never leaves your device), it is generally not possible to locate or retrieve a specific individual's data. If you have a concern or wish to exercise your rights, you may also contact your national supervisory authority — a list is available at edpb.europa.eu.

Changes to this policy

If this policy changes materially, the updated version will be posted here with a revised date. Last updated: July 2026.