We collect almost nothing, and we will tell you exactly what.

The site works without an account or login. We do not set advertising or cross-site tracking cookies.

We use Vercel Web Analytics and Speed Insights for aggregate page-view counts and page-performance timings. Vercel states these do not use cookies and do not track visitors across sites. We see totals and trends, not people.

Some vendor cards fall back to unavatar.io to fetch a profile picture we have not yet snapshotted ourselves. When that happens your browser makes a request to that third party, which will see your IP address as it would for any image on the web. Most avatars are served from our own domain specifically to avoid this.

We store your email address, your alert preferences, and (if you opt into portfolio-change alerts) a snapshot of the allocation inputs those alerts are diffed against. Email is delivered through Resend.

Subscriptions are double-opt-in: we send a confirmation link and store nothing durable until you click it. Every email carries a one-click unsubscribe, and you can change or drop any alert type at /prefs. Unsubscribing removes the contact.

We never sell, rent, or share the list, and we do not use it for anything but the alerts you asked for. Joining the USA fleet waitlist on /hashrate opts you into one extra channel: an email when the number of open Galaxy Mind machines goes up, at most once a day. Nothing goes out while that count stays flat or falls. That is the only hashrate email. You can turn it off at /prefs.

We store the push subscription your browser generates: an endpoint URL issued by your browser vendor and the keys needed to encrypt a message to it. That is what a push notification requires; it is not tied to an email address or a name. Turning the toggle off removes it.

Linking X is entirely optional. Every game works anonymously, and the leaderboards accept anonymous entries. If you do link, we store your X user ID, the @handle and profile image URL as they were at link time, and when you linked. Your session is an HttpOnly, signed cookie. We never receive your X password, and we cannot post as you.

Linked players also get cross-device save sync: game progress (records, unlocks, stats) stored against your X user ID so it follows your login.

Unlinking deletes all of it: the stored profile and the saved progress. That is the whole deletion story for the only personally-identifying data the arcade keeps.

The arcade game CHOP sends two anonymous events: one when the game loads, and one when a run ends. They record how the game was played — the difficulty, how long the run lasted, hits and misses, the grade, and whether the block was finished or abandoned.

There is no identifier of any kind. No account, no cookie, no device ID, and never your arcade handle. Durations are rounded to five seconds and run counts are grouped into bands before anything leaves your device, and only the calendar day is recorded, not a timestamp. Two runs by one person are indistinguishable from two runs by two people — deliberately, because this measures the game and not the players.

It exists so the game can be improved by evidence rather than guesswork (where people quit, which difficulty they choose, whether the tutorial helps). Turn it off any time under Settings → Anonymous stats in the game; the game then sends nothing. Because the events carry no identifier, there is nothing to look up or delete afterwards.

We store what you type into the form: the merchant's handle, name, description, category, and any optional details like country, website, or Lightning address, plus any note you add for the reviewer. This is business information intended for publication, and approved entries become part of the public directory.

The submit form requires an email address. We store it for up to 90 days and use it once, to tell you the outcome of your submission, whether it was listed or not. If the listing is accepted that message includes the verified-bitcoin badge for your shop. The address is deleted as soon as that message is sent, and it is never added to any mailing list. Operator-added listings (not submitted through the form) may have no address.

We do not store your IP address with the submission. Rejected submissions are kept briefly for audit and then expire.

Once a merchant is listed, a nightly job records whether their public shop and profile still resolve (gm:vendor:signals), queues changes for the operator (gm:vendor:review-queue, gm:vendor:review-notified), and may mark a quiet Nostr merchant dormant (vendor:dormant:*). A daily drip also records which public handles have already been drafted a badge DM for the operator to send (gm:badge-outreach:v2), so the same shop is not messaged twice, plus a short-lived flag for the public badge-launch post (gm:badge-launch:v1). Those records are keyed by the merchant's public handle, never by a visitor, and they never write the public verified-at date.

The form may be protected by Cloudflare Turnstile, a privacy-focused captcha, to keep out automated spam.

Some endpoints are rate-limited to keep floods and abuse from running up costs. That works by incrementing a short-lived counter keyed to your IP, which expires on its own within the rate-limit window. We do not log request histories against it, build profiles from it, or use it for analytics.

The directory homepage reads the country our host derives from your IP for that one request, so a visitor outside the US can see which shops ship worldwide or are based nearby. The country is not stored or logged, and hiding the tip is remembered only in your browser.

Game saves, streaks, dismissed banners, an unfinished shop submission on /submit (cleared when you submit or after 14 days), and similar preferences live in your browser's local storage. They stay on your device unless you have linked X and enabled save sync, described above. Clearing your browser data clears them.

Arcade leaderboards are different: when you post a score, we store the culture handle you typed (or your linked X identity) and that score in a capped public board. That is how a leaderboard works. Unlinking X deletes the stored profile; an anonymous row stays until the board expires.

The full list of processors, and nothing beyond it: Vercel (hosting, analytics), Upstash (the key-value store holding the records above), Supabase (the database holding hashrate rental orders), Resend (email delivery), Cloudflare (captcha), X (only if you choose to link an account), and, for hashrate rentals only: Coinbase (the Coinbase Developer Platform payment service that settles USDC payments, the Base Account wallet sign-in, and the BTC/USD price check), Kraken (a second BTC/USD price check, no personal data), public blockchain services such as mempool.space, Blockstream and Solana RPC nodes (to confirm a payment on-chain), and the third-party hashrate marketplace we list on (if you rent through it instead of directly).

The wallet you pay from (for example MetaMask, Coinbase Wallet, Phantom or Solflare) is software you choose. Its own privacy policy covers what it collects.

Galaxy Mind does not handle payments for directory merchants. We do not take their orders, hold their funds, or process their transactions. When you buy from a merchant in the directory, that happens entirely between you and them.

Hashrate rentals are different. When you rent directly from us, we receive your payment directly in USDC or bitcoin. To deliver the rental and keep proper books, we record the wallet address you paid from, the transaction ID, the amount, the rental details (machines, duration, the mining destination you point them at), and any contact or payout details you give us. We keep these records for as long as tax and accounting law requires.

We never see a card number or bank login. Keep in mind that on-chain transactions are public and permanent: anyone can see a payment on the blockchain, and nobody, including us, can erase it.

If you rent through a third-party hashrate marketplace, that marketplace handles the payment and its own privacy policy applies. We receive the rental details it shares with machine owners.

We keep personal data only as long as we need it for the purpose it was collected for, plus any period the law requires for legal, tax, accounting or fraud-prevention reasons. After that we delete it or anonymize it so it can no longer be tied to you. The specific timings above (for example, 90 days for a submission email) are the shorter limits for those features.

We protect what we store with encryption in transit, access limited to the people and services that need it, and secrets kept server-side. No system is perfectly secure, so we collect as little as we can in the first place. If we learn of a breach that affects your data, we will tell you as the law requires.

Galaxy Mind is run from the United States, and our providers may store or process data in the US or other countries. Those countries may have different data protection laws than where you live. By using the site, you understand your information may be handled there.

There is no common standard for browser Do Not Track signals, so we do not respond to them. It makes little difference here: we do not track you across other sites to begin with.

Depending on the US state where you live, you may have the right to know what personal data we hold about you. You may also be able to get a copy of it, correct it, delete it, and opt out of its sale or use for targeted advertising. We do not sell personal data or use it for targeted ads. To use any of these rights, contact us using the channels below. We may need to confirm the request is yours, and we will not treat you differently for asking. If we turn a request down, you can ask us to reconsider. Records the law requires us to keep, such as payment records, may be kept even after a deletion request.

Email: unsubscribe from any message or at /prefs. Push: turn the toggle off. X identity and game saves: unlink in the arcade.

For anything else, or if you want confirmation that something is gone, message @GalaxyMind on X or on Nostr. It is one person reading them, so it will not be instant, but it will be honest.

Galaxy Mind is not directed at children and we do not knowingly collect data from anyone under 13. You must be 18 or older to rent hashrate or make a payment.

If this policy changes materially, the date below changes with it. There is no version where we quietly start collecting more than this page describes.

Last updated October 22, 2026