Privacy

Last updated 18 August 2026

The short version: this site has no advertising network, no analytics provider, no tracking pixels, no cross-site identifiers, and no way to email you. What follows is the complete inventory of what it does keep, and why.

What is stored

Data	Why	Kept
Search queries	Queries with no good answer become crawl targets — this is the mechanism by which the index grows. Stored as the text of the query only, not joined to an identity.	Indefinitely, aggregated
Result clicks	Which result answered a query is the signal that improves ranking. Recorded as query→URL→position.	Indefinitely, aggregated
Request log	IP address, user-agent and path, to tell humans from scrapers and to spot attacks. Operator pages and static assets are excluded.	Rolling, oldest discarded
Account	A Bitcoin public key and the address you signed with. That is the entire account record.	Until you stop using it
Sign-in log	Each successful sign-in: the time, which method you used (wallet or key), your public key, IP address and user-agent. Kept so the operator can see unexpected access to an account — the same reason any service shows you a login history. A failed attempt writes nothing.	Rolling, newest 2,000
Section opens	Which parts of the site signed-in members open, with the public key and time. Used to see which features are worth keeping. Not recorded for logged-out visitors at all — the script is not even sent to them.	Rolling, newest 4,000
Username	Generated for you at sign-up from your public key (e.g. warm_forge2422) so you have a readable name without supplying any personal detail. Stored with the key it belongs to. Changeable, and a previous name is kept for 90 days so it cannot be taken by someone else.	Until you change it
Storefront	If you create one: shop name, description, shipping and returns text, and the links you supply. All of it is published on your page by your own choice — treat it as public.	Until you remove it
Listings	Title, detail, price text and your link. Public by design. If a listing has been featured, the date its window ends is stored with it.	Until you remove them
Saved searches	Only if you save them, attached to your public key.	Until you delete them
Signed messages	If you contact the operator: your message, subject and signing address.	Until dealt with
Preferences	Theme, panel style, font, size, language. These live in your browser's local storage and are never sent to the server.	On your device only

What is never stored

• Email addresses, phone numbers or postal addresses — there is no field for them anywhere on the site.
• Passwords — the account system has none to store.
• Private keys or seed words. These are never requested, never transmitted, and would never be needed. Anyone asking you for them is not us.
• Card or bank details. Anything ever paid for here is paid in bitcoin, settled on-chain between wallets, so there is no card number, account number or billing address to collect — and none is ever asked for.
• Advertising or cross-site tracking identifiers of any kind.

About your username

It is generated, not asked for. Nothing about it is drawn from your identity — it comes from your public key, which means we never need a real name, a handle you use elsewhere, or any other detail that could tie the account to you. The words are picked from a fixed list, so a generated name reveals nothing beyond the fact that the account exists.

If you replace it with one you choose, that is entirely your decision — and worth a moment's thought, since a self-chosen name is the one piece of an otherwise anonymous account that can identify you. Your public key is the real identity either way, and it is shown on your profile so anyone can verify who they are actually talking to.

Anonymous login — what Bit-SIGN actually protects

Bit-SIGN is an anonymous, passwordless sign-in. There is no email address, no password, no name, no phone number and no identity check at any point. You are never asked who you are, so we never find out. This is data minimisation taken to its conclusion: the information cannot be leaked, sold, subpoenaed or breached, because it was never collected in the first place.

Compared with an ordinary account, the difference is what is missing:

• No password to steal. There isn't one, so it cannot be reused, guessed, phished or dumped in a breach. Signing a challenge is phishing-resistant by construction — a signature for this site is useless anywhere else.
• No email address. An email is the thread that ties one account to your real identity and to every other service you use it on. We hold none.
• No profile you didn't write. No tracking pixels, no advertising identifiers, no third-party analytics, no data brokers, no cross-site profile.
• Your searches are not tied to your identity. Queries are recorded to improve ranking, but they are not linked to your account.

Where the privacy stops. We would rather under-promise than have you rely on something untrue. Your public key is visible on your profile — that is the point, it is how people verify who they are talking to — and anything you publish is public. Bit-SIGN makes you pseudonymous: it is strong privacy from us, from advertisers and from a breach, but it is not a substitute for Tor, a VPN or operational security. If your safety depends on not being identified, do not rely on any single website. The table above lists everything recorded.

Signing in with a key instead of a wallet

There are two ways to prove your key, and both collect exactly the same thing: nothing beyond the public key itself. Whether you sign the challenge in a wallet or with the optional signing script, what reaches this site is a public key and a signature. We do not learn which wallet you use, what it holds, or whether it holds anything at all — we never look at a balance and have no way to.

The signing script runs entirely on your own machine. It does not contact this site, sends us no telemetry, and has no network access at all — you can read it before you run it. A private key is never transmitted, never requested, and never stored. No page here has a field that would accept one.

The challenge line itself is held in memory for a few minutes and then discarded. It is single-use: once a signature is verified the challenge is deleted, so the same signature cannot be replayed.

Selling, storefronts and promotion

A storefront and its listings are public information you chose to publish. Anything put there — a business name, a shipping region, a link to your own site — is visible to everyone the page is visible to, and is likely to be indexed by search engines. Publishing a business identity alongside an otherwise anonymous key does connect the two, so decide that deliberately.

No payment data is involved, in either direction. Crypttron takes no payment for your sales, holds no funds and runs no escrow, so there is nothing about your buyers here at all — no names, no addresses, no order records. Those exist only on your own site, under your own privacy policy, which is your responsibility rather than ours.

Promotion is currently free, so no payment information of any kind is involved. Were a fee ever introduced it would be bitcoin paid wallet to wallet, which still means no card number, bank account or billing address to collect — and none would be asked for. All that is recorded is which listing was featured and until when.

Cookies

Three, all first-party and all functional: a session token if you sign in, your chosen language, and an operator token if you are the operator. There are no analytics or advertising cookies, so there is nothing to consent to and no banner asking you to.

Third parties

The pages you see are served from one server and reference no external scripts, fonts or trackers. Two things do reach outward, and you should know about both:

• Outbound result links. Clicking a result takes you to somebody else's website, which will see you arrive and applies its own privacy policy, not this one.
• The crawler. Working outward, it fetches public pages from the sources listed on the crawler policy page. That is the operator's traffic, not yours.

Affiliate links

Some outbound links to hardware retailers carry a referral code, which tells the retailer the visit came from here. This is disclosed on the pages where it applies. It funds the service and never influences ranking. Referral links are used only for physical products — never for exchanges, token sales, staking or yield products.

Anonymity of search

Queries are stored as text and used in aggregate; they are not linked to your account even when you are signed in, and not linked to your IP in the search log. That is a design choice: the learning loop needs to know which queries fail, never who asked.

Your options

• Signing in is entirely optional — search works fully without an account.
• Delete saved searches at any time from your account page.
• Ask for your account record to be erased through signed contact; proving key control is the only identification needed.
• Publishers can have their pages removed from the index on request.
• Block the crawler in one line — see the crawler policy.

See also Terms.