Privacy

What is stored

• Your account. Your email address; your password as a salted hash (PBKDF2-SHA256), never the password itself; the payout wallet address you save; an optional contact you choose to give (a Telegram handle, a WhatsApp number or another email address); your referral code and, if you signed up through a referral link, which account referred you; when the account was created, when you last signed in and when the password was last changed.
• Your orders. The plan, its hashrate and price; the coin and network you chose; the amount and the address you were shown; the transaction hash of your payment; the status of the order and the times it was created, reported as paid, activated or cancelled.
• Your payouts. For each payout the operator records: the coin, network, amount, on-chain transaction hash, time and any note.
• Referral commissions and withdrawals. Which order a commission came from, its tier, amount, status and clearing date; and for each withdrawal request the amount, coin, network, destination address, status, transaction hash and times.
• Support requests. The email address, subject, message and contact you enter, your account if you were signed in, the operator’s reply, the time, and the IP address the request came from.
• The updates list. If you leave your email for updates, that email address and the time.
• A log of account changes. When you change your payout wallet, your contact or your password, the site records that it happened, with your email, the time and your IP address. For a wallet change it also records the old and the new address. The operator’s own actions on your orders, payouts, withdrawals and support requests are logged in the same place.
• Rate-limit records. To slow down abuse, the site keeps short-lived counters for sign-in, sign-up, support requests and the updates list. They are keyed by IP address, or by the email or account being tried, and are cleared once they are more than 24 hours old.

What is not collected

• No name, postal address, date of birth or identity document is asked for.
• No card or bank details. Plans are paid for in cryptocurrency, straight from your wallet.
• No advertising trackers, analytics scripts or third-party scripts are in the site’s code. Fonts are served from the site itself.
• Your wallet’s seed phrase or private keys are never asked for. Do not give them to anyone.

Cookies and browser storage

• The sign-in cookie. When you sign up or sign in, the site sets one cookie that keeps you signed in for up to 7 days. It is signed, cannot be read by scripts in the page, and is cleared when you sign out. It is the only cookie a customer receives. A second cookie of the same kind exists only for the operator’s admin sign-in.
• No other cookies. There are no advertising or analytics cookies.
• Page cache. The site keeps copies of pages it has shown you in your browser’s own cache so they load when your connection drops. Account data from the server is never cached this way.

Other services involved

• Cloudflare. The site is hosted on Cloudflare and its database is a Cloudflare database. Every request you make passes through Cloudflare, which sees your IP address and the details of the request, as any host does.
• CoinGecko and mempool.space. For the live Bitcoin price and network figures on the home page, the calculator and the dashboard, your browser asks these two public services directly. They see your IP address and that the request came from this site. No account data is sent to them. Transaction links in your dashboard open mempool.space when you click them.
• Price quotes. When you create an order, the server asks a public price service for the current rate of the coin you chose. Nothing about you is sent with that request.
• Operator alerts. The operator can have the site send it an email alert about a new order or request. If that is switched on, the alert is sent through Cloudflare’s email service and can contain your account email and the details of the order or request.
• The blockchain. Your payment, your payouts and your withdrawals are blockchain transactions. Their addresses and amounts are public and permanent, and nobody can delete them.

Who can see your data

The operator sees your account, orders, payouts, withdrawal requests and support requests in order to activate plans, send payouts and answer you. The site’s code has no feature that sells this data or passes it to advertisers.

How long it is kept

Rate-limit records are cleared once they are more than 24 hours old. Minevana has not published retention periods for anything else; the rest stays stored until it is deleted.

How to ask for deletion or a correction

• Send a request through the support page, signed in if you can, so the request is linked to your account. Say what you want deleted or corrected: your account, or your email on the updates list.
• Requests are handled by hand by the operator. No turnaround time is published.
• Transactions already on a blockchain cannot be deleted by anyone.

Changes to this page

If what the site stores changes, this page is updated and the date at the top changes. The rules for plans are on the terms page.