Privacy Policy

The controller responsible for data processing is Cryptron UG (haftungsbeschränkt).

You can reach us by email at hello@lumihash.com. Our full postal address and further company details are listed in the Imprint.

Website: when you visit this site, our systems automatically collect technical information such as browser type and version, operating system, the referring page and the time of access. This is required to deliver the site securely and reliably.

Contact form: the name, email address, tier and message you send us, so we can answer. The message is delivered to us by email and not stored anywhere else on this website.

Account: if you open a LumiHash account, we process your name, email address, country, the sign-in methods you set up (password, two-factor codes, passkeys), and your record of accepting these terms and the privacy policy.

Orders and billing: your plan, prices, subscription status, coupon codes, and — where you provide one for an invoice — your postal address.

Mining: the serial numbers, hashrate, temperatures, power draw and uptime of the miners assigned to you, and the share of the site's monthly electricity attributed to them.

Payouts: the Bitcoin address you give us, the amounts paid out and the transaction identifiers.

We process personal data in accordance with Art. 6(1) GDPR: on the basis of your consent (lit. a) for marketing email; for the performance of a contract or pre-contractual measures (lit. b) for your account, your plan, mining telemetry and payouts; to comply with a legal obligation (lit. c) for invoices and bookkeeping; and on the basis of our legitimate interests (lit. f) for the secure operation of the service and the prevention of abuse.

This website uses only strictly necessary cookies required for operation and to remember your preferences (such as your language). The dashboard additionally sets a session cookie so you stay signed in, and short-lived cookies while you register a passkey. We do not use tracking, analytics or advertising cookies.

Our visitor statistics work without cookies: Plausible stores nothing on your device and sets no identifier, so there is nothing to consent to under § 25 TDDDG. We count page views, referring sites and clicks that leave this site for our dashboard, always in aggregate and never tied to a person. The legal basis is our legitimate interest in knowing whether this website works (Art. 6(1)(f) GDPR); you can object at any time.

You can manage or disable cookies at any time through your browser settings.

Cloudflare, Inc., USA — content delivery, DNS and protection against attacks. All traffic to this website and to the dashboard is routed through Cloudflare, which therefore processes your IP address and request data.

Hetzner Online GmbH, Germany — hosting. The LumiHash website, dashboard and database run on our own servers in a German data centre.

Resend (Plus Five Five, Inc.), USA — transactional email such as sign-in codes, order confirmations and cancellation confirmations.

sevDesk GmbH, Germany — invoicing and bookkeeping. Receives your name, billing address and the amounts invoiced.

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg — payment processing (see section 6).

RevenueCat, Inc., USA — in-app purchases in the LumiHash mobile app. We send RevenueCat no customer identifier; the app is known to them only by an anonymous ID.

Apple and Google — distribution of the mobile app and handling of in-app purchases.

mempool.space, blockstream.info and blockchain.info — public blockchain services we query to display balances and payouts.

Plausible Analytics — visitor statistics for this website, which we host ourselves on our own server in Germany. No data reaches the company behind Plausible, and none leaves our infrastructure.

We use no advertising services and no cross-site tracking. Fonts are delivered from our own servers, so no connection is made to Google Fonts.

When you take out a paid hosting plan, payments and subscription billing are processed on our behalf by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). To handle the transaction, PayPal processes the billing and payment data required for it — in particular your name, email address and payment details (such as your PayPal account and the card or bank account you choose as a funding source). We neither receive nor store complete payment card details on our own systems.

The legal basis for this processing is the performance of our contract with you and pre-contractual measures (Art. 6(1)(b) GDPR); where processing serves to prevent fraud, it additionally rests on our legitimate interests (Art. 6(1)(f) GDPR). PayPal may transfer data to third countries — in particular to PayPal, Inc. in the USA — on the basis of EU Standard Contractual Clauses. Further information on how PayPal handles your data can be found in PayPal's privacy statement at https://www.paypal.com/de/legalhub/privacy-full.

Cloudflare, Resend and RevenueCat process data in the United States. Cloudflare's and Resend's transfers are covered by EU Standard Contractual Clauses; Resend is additionally certified under the EU–US Data Privacy Framework. RevenueCat's transfers are covered by EU Standard Contractual Clauses; RevenueCat is not certified under the Data Privacy Framework.

Everything we store — the database, your account, all mining data and our visitor statistics — stays on our own servers in Germany.

The mobile app monitors your miners locally on your own network. Readings from your devices are stored on the phone and are not transmitted to us.

Pairing: when you pair the app with your account, it sends a device token to our servers so it can show the miners you rent from us.

Purchases: LumiHash Pro is handled by RevenueCat. The app only contacts RevenueCat once you open the purchase screen or have already bought — if you never buy, it never contacts them at all.

Blockchain lookups: to display balances and transactions the app queries public blockchain services. The address being looked up and your IP address are transmitted to their operators.

Local network: the app needs access to your local network in order to find your miners. Those connections do not leave your network.

Payouts are made to a Bitcoin address you give us. Once a payout has been made, the address, the amount and the date are stored publicly and permanently in the Bitcoin blockchain. Nobody can delete or change that record, including us. Please bear this in mind when choosing the address you give us.

Account and sign-in data: for as long as your account exists, then 30 days.

Records of your consent: three years after the account ends, so that we can demonstrate it was given.

Orders, payments and invoices: ten years, as German tax law requires (§ 147 AO).

Mining telemetry: 90 days as a time series; the monthly totals that support invoices are kept for ten years.

Administrative access logs: twelve months.

You have the right to obtain information about the personal data we hold about you, and to request its correction or deletion. You may restrict or object to processing, request data portability, and withdraw any consent given with effect for the future.

You can download all of your data yourself at any time in the dashboard under Settings → Your data, and you can request deletion of your account there as well. Deletion is carried out after 14 days, during which you can still stop it. For anything else, write to us and we will answer within one month.

Two limits on deletion we must be open about: invoices must be kept for ten years under § 147 AO even if you ask us to delete them, and payouts already written to the Bitcoin blockchain are public and cannot be removed by anyone.

You also have the right to lodge a complaint with a data protection supervisory authority.

If you subscribe to a newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in each newsletter or in the dashboard under Settings.

For any questions regarding this privacy policy or your personal data, please contact us at hello@lumihash.com.