Privacy
What garlicoin.org keeps about you, why, and for how long, in plain words. The short version: no accounts, no ads, no tracking cookies, and your private keys never reach us.
The short version
- No accounts and no ads. We don't sell or share data with anyone.
- Private keys stay in your browser. The gift card maker, vanity addresses, message signing and gift card claims do all key work on your device. Those pages are locked down so they can only run this site's own code.
- The blockchain is public and permanent. Anything you write on the wall, a garlic name, a payment: anyone can see it, forever, and nobody (us included) can remove it.
- Settings live on your device. Your theme, game high-score name, seller key and garlic name edit links are kept in your browser's storage, not on our server.
What our server keeps
| When you… | We keep | For |
|---|---|---|
| Visit any page | The web server log: your IP address, the page address (including anything typed into it, such as an address you checked), browser type | 14 days |
| Hit a script error on a page or in the wallet | The page, the error message, which of our script files and line, and your browser family (e.g. "Firefox mobile"). No IP: only a code that changes daily, to count visitors and stop floods. | 30 days |
| Have a page open | The "people here now" count: a random number for the tab, the page and the time. No IP. | 10 minutes |
| Use the faucet | Your address and IP, to enforce the 8-hour wait; the payout (address, amount, transaction) | 8 hours; payouts kept |
| Enter Block Lotto | Your address, IP, network, browser type and country, to keep it one entry per person | Kept with the draw |
| Post a game high score | The name you chose, the score, your IP (to stop flooding) | 60 days, or longer if it's an all-time top score |
| Check an address's balance, claim a gift card, or make a gift link | The address, the result and your IP, as a short cache and to stop abuse. Never the key: a gift link's key sits after the # in the link, which browsers don't send to any server. | 1 day |
| Use the wallet | Nothing of your key or passphrase: they never leave your browser. To look up your coins and relay what you send, we see your wallet's addresses, your IP and the signed transaction, like any wallet server. | 1 hour (request log) |
| Open a payment screen | The address being watched, your IP, and payments it showed | 30 days |
| Sell something | Your name, payout address, what you sell (including the hidden part buyers get) and a scrambled copy of your seller key | Until you remove it |
| Pay for a wall message, name or other feature | What you paid for and the payment; your IP to stop flooding | Kept (it's on the chain anyway) |
| Sell on the marketplace | Public: your listing, its photos (re-encoded, so camera details and location are dropped), your wallet's public key and address, and your ratings. Private: your IP, to stop abuse | Until you remove the listing; ratings kept |
| Buy or sell through a marketplace order | The order (both wallets' public keys and addresses, the amount, its steps and transaction IDs) and your messages, which are encrypted in your wallets so we can't read them | Kept, so ratings and the trade history stay checkable |
| Report a listing | The reason you gave and your IP | Until it's dealt with |
| Add a shop to the directory | The listing, your contact if you gave one (never shown), your IP | While listed |
| Use the wallet | Anonymous daily totals the wallet reports, like "a wallet was used today" (once a day, week and month, remembered on your device), "a wallet was made", its language, and whether it's installed or has notifications on. No address, key or anything that identifies you or your wallet. | Daily totals kept |
| Wallet notifications ("Notify me when I'm paid") | Your wallet's addresses, your browser's notification address and its encryption keys, your IP; with price alerts, the size you picked, your currency and the price at the last alert | Until you turn them off (or the browser drops them) |
| Discord pings (payment screen, seller settings) | The address, your webhook URL and the name you gave, your IP; each payment's message until it's sent | Until you stop them (messages: 2 days) |
Other services involved
- Cloudflare carries all traffic to garlicoin.org, so it sees what any web host sees.
- Captcha (Google reCAPTCHA or Cloudflare Turnstile) on the faucet and lotto, which may set its own cookies.
- ip-api.com gets your IP address (at most once a day) when you use the faucet or lotto, to block VPNs, proxies and datacenter connections.
- Community Electrum servers (listed on the status page) see addresses you look up or claim from, and the signed transfer. They see our server's IP, not yours.
- Discord receives the payment pings you set up, in your own channel.
- Links out, such as the block explorer, Discord or Reddit, follow those sites' own rules.
Questions
Ask in the Garlicoin Discord. If you want something of yours removed from our server (a shop listing, a product you sell), say so there and we'll take care of it. Things on the blockchain can't be removed by anyone.
Last updated October 18, 2026.