Privacy

Privacy Policy

Last updated · September 2026

The Project

Bitcoin Witness is a pre-launch project to deliver an air-gapped Bitcoin verification layer. A full legal notice will be published when the product launches. Until then, we can be reached at the contacts below for any privacy or general inquiry.

General contact: hello (at) bitcoinwitness.org
Privacy inquiries: privacy (at) bitcoinwitness.org

What we collect

When you submit the waitlist form, we collect:

  • Your email address. Used to notify you when Bitcoin Witness is ready and to send occasional updates about the product.
  • Netlify Forms submission metadata. Netlify records the timestamp, IP address, and user-agent string with each submission as part of its standard form intake. This data is held by Netlify under their own retention policy.

We do not use cookies. We do not load any client-side analytics script into your browser. We do not track you across other sites.

Server access logs (Netlify Analytics)

Netlify, our hosting provider, collects standard web server access logs as part of serving this site: IP address, URL requested, referrer, user-agent, timestamp. We use Netlify Analytics to view aggregated metrics derived from those logs: pageviews, top pages, referrers, and visitor countries. No client-side tracker is loaded into your browser to produce these metrics.

Why we collect it (legal basis)

We process your email address on two legal bases under GDPR Article 6:

  • Consent (Art. 6(1)(a)). By submitting your email address via the waitlist form, you consent to receive updates from Bitcoin Witness. You can withdraw this consent at any time by unsubscribing from any email we send, or by emailing privacy (at) bitcoinwitness.org.
  • Legitimate interest (Art. 6(1)(f)). We have a legitimate interest in operating and improving this website. Server access logs serve that purpose. They help us understand which pages work and which do not, without requiring your consent because no personal data beyond standard server logs is processed for this purpose.

Who we share it with

We use two third-party service providers to operate the waitlist:

  • Netlify, Inc. (United States): website hosting, form intake, server logs, and analytics. Your form submission data (email, source, IP, timestamp, user-agent) is stored in Netlify's infrastructure. Data Processing Agreement in place. Transfers from the EEA and UK to the US are covered by Standard Contractual Clauses (EU Commission Decision 2021/914, Module C2P, controller to processor).
  • Buttondown LLC (United States): email list management and delivery. Your email address and source tag are forwarded to Buttondown when you submit the form. Buttondown stores and processes your email address to deliver messages on our behalf. Data Processing Agreement in place. Transfers covered by Standard Contractual Clauses (EU Commission Decision 2021/914, Module C2P).

We do not sell data. We do not use it for advertising.

How long we keep it

We retain your email address in Buttondown until you unsubscribe. At that point your record is deleted from our active subscriber list.

Netlify Forms submission records (including IP address and user-agent) are retained per Netlify's standard data retention policy. Server access logs are retained per Netlify's standard policy. We do not control these retention periods directly. Netlify's privacy policy governs them.

Your rights

Under GDPR and UK GDPR you have the following rights with respect to personal data we hold about you:

  • Access. You can ask us to confirm whether we hold personal data about you and to provide a copy.
  • Rectification. You can ask us to correct inaccurate data.
  • Erasure. You can ask us to delete your data ("right to be forgotten").
  • Portability. You can ask for your data in a structured, machine-readable format.
  • Withdraw consent. Unsubscribing from any email we send withdraws consent and stops future mailings. You can also email privacy (at) bitcoinwitness.org to request full deletion.

To exercise any right, email privacy (at) bitcoinwitness.org. We respond within 30 days. For complex requests we may extend this by up to 60 days with notice.

Children

This site is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, contact privacy (at) bitcoinwitness.org and we will delete it.

Security

All traffic between your browser and this site is encrypted. Both Netlify and Buttondown operate with industry-standard security practices. For details, see their respective security pages.

Breach notification

If we become aware of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, we will notify the relevant parties within 72 hours of becoming aware.

Changes to this policy

We update this policy when our practices change. The "Last updated" date at the top of this page reflects the most recent revision. If changes are material, we will announce them to subscribers by email.

Contact

Privacy inquiries: privacy (at) bitcoinwitness.org

Related

Terms of ServiceLegal Notice