Privacy Policy

MiningFlow is built to collect as little personal data as possible. We do not ask for your name, email address, phone number or identity documents.

1. What we store

• Account: your username, and your password and recovery key in hashed form (we cannot read them).
• Two-factor authentication: if you turn it on, its secret is stored encrypted.
• Wallet activity: deposits, plan purchases, daily profit, referral commissions and withdrawals, including the blockchain addresses and transaction IDs involved.
• Security signals: keyed one-way hashes of the IP address and device used at sign-up, and encrypted IP addresses in our security log. They are used to stop fraud, account takeover and self-referral.
• Sessions: active sign-ins, so you can see and end them in your Profile.

2. Cookies

• A sign-in cookie that keeps you logged in (removed when you log out).
• A referral cookie that remembers which link brought you here, for 30 days.

We use no advertising or tracking cookies and no third-party analytics.

3. Who else processes data

• Payment processor: deposits go through CryptAPI, which sees the deposit address, amount and blockchain transaction. It does not receive your username.
• Hosting and network: our server provider and network security provider handle traffic to the site, including IP addresses, to deliver and protect it.
• Blockchains: crypto transactions are public and permanent by design.

We do not sell or rent your data to anyone.

4. How long we keep it

Account and transaction records are kept while your account exists and afterwards for as long as needed for accounting, fraud prevention and legal obligations. Encrypted backups are deleted on a rolling basis.

5. Security

Passwords are hashed with Argon2id, sensitive fields are encrypted, all traffic uses HTTPS, and administrative access is restricted to private connections with mandatory two-factor authentication.

6. Changes

We may update this policy. The date at the top shows the latest version.