Privacy Policy

Last updated: August 24, 2026

Bitcoin Plaster publishes about self-custody, key control, threat models, and what can happen when private information reaches the wrong hands. A publication built around those subjects should be equally clear about the information it handles from its own readers.

The short version is simple. You do not need an account, name, or email address to read Bitcoin Plaster. The site uses technical records and analytics to understand whether pages work, which content readers reach, and where the site can be improved. An email address is collected only when a reader chooses to submit one for a checklist, newsletter, or another email resource.

Bitcoin Plaster does not sell or rent reader personal information. It does not run an advertising network or use reader data to build an advertising profile.

Most importantly, Bitcoin Plaster will never ask you for a seed phrase, recovery words, private key, wallet password, two-factor code, or remote access to a device.

This page explains the detail behind that summary.

Who is responsible for this site

Bitcoin Plaster is published by [DATA CONTROLLER LEGAL NAME], [POSTAL ADDRESS], [COUNTRY], which is the data controller for the personal data described on this page.

Privacy questions, access requests, deletion requests, and other privacy-related messages can be sent to:

contact@bitcoinplaster.com

Articles on Bitcoin Plaster use pseudonymous editorial bylines for personal-security reasons. The Editorial Policy explains that choice and how editorial accountability is maintained. Data responsibility works differently. A reader asking what information is held about them needs a real counterparty rather than a pen name, which is why the controller is identified above.

What Bitcoin Plaster never asks for

This section matters on a publication about Bitcoin custody.

Bitcoin Plaster will never ask you for:

• a seed phrase or recovery words;
• a private key;
• a wallet passphrase;
• a wallet backup file;
• a wallet, exchange, email, or social-media password;
• a two-factor authentication code;
• remote access to your computer or phone;
• identity documents or proof of Bitcoin holdings for ordinary editorial contact;
• payment card or bank details for an editorial correction.

There is no legitimate editorial reason for Bitcoin Plaster to need a reader's custody secrets.

If someone claims to represent Bitcoin Plaster and asks for a seed phrase, private key, password, two-factor code, remote device access, or another custody secret, do not provide it.

Report suspected impersonation through the Contact & Corrections page or by emailing contact@bitcoinplaster.com.

What information the site processes

When you read a page

You do not need to create an account or submit personal information to read Bitcoin Plaster. You never have to provide an email address to access an article, and ignoring an optional signup form does not restrict what you can read.

Serving a website still produces ordinary technical information. Bitcoin Plaster's hosting, security, and analytics services can process information such as:

• the page requested;
• date and time of the request;
• referring page or campaign source;
• browser and device information;
• general network information such as an IP address and user agent;
• navigation and interaction events;
• performance, error, and security information.

This information is used to deliver the site, keep it available, detect abuse, diagnose technical problems, understand whether pages work as intended, and measure which content readers use.

When you join the email list or request a resource

Bitcoin Plaster uses MailerLite for email subscription forms and email delivery.

If you enter your email address to receive a checklist, newsletter, PDF, or another email resource, MailerLite processes that address and the subscription information needed to deliver the resource and manage the mailing list. This can include consent and subscription status, delivery information, unsubscribe status, and message interaction data such as opens or clicks where those features are enabled.

The site also records limited source information for some signup surfaces, such as which page or call-to-action led to the form. That is used to understand which resources and placements are useful. It is not used to create an advertising profile.

You can unsubscribe at any time using the unsubscribe link included in an email.

When you contact Bitcoin Plaster

If you send a message to contact@bitcoinplaster.com, Bitcoin Plaster receives the information you choose to include, such as your email address, the page or issue you are writing about, and the contents of the message.

Do not include seed phrases, recovery words, private keys, wallet passwords, exchange credentials, two-factor codes, wallet backup files, or other custody secrets. Bitcoin Plaster does not need that information to review a correction, answer an editorial question, or investigate a website issue.

Why the site is allowed to process this information

Where European or UK data protection law applies, Bitcoin Plaster relies on different legal bases for different activities.

Delivering, securing, and maintaining the website relies on legitimate interests. A publication has a legitimate interest in serving pages reliably, diagnosing failures, preventing abuse, and protecting its infrastructure. The information used for those purposes is limited to what is reasonably necessary for those functions.

Sending a checklist, newsletter, or another requested email resource relies on consent. You give that consent when you submit the relevant form. You can withdraw it at any time by unsubscribing or contacting Bitcoin Plaster. Withdrawal stops future consent-based processing and does not make earlier lawful processing unlawful.

Optional analytics that stores or reads non-essential information in your browser relies on consent where applicable law requires it. Those tools load only after the relevant analytics choice is accepted. Declining optional analytics does not restrict what you can read or download.

Aggregate measurement that does not require non-essential browser storage and is not used to identify a reader is used on the basis of legitimate interests, for the narrow purpose of understanding whether the publication and its content work as intended.

Responding to a message or correction request relies on legitimate interests in communicating with readers, maintaining editorial accuracy, and resolving legitimate issues.

Keeping records where the law requires them relies on legal obligation.

No automated decision-making or profiling that produces legal or similarly significant effects takes place through bitcoinplaster.com.

Analytics and similar technologies

Bitcoin Plaster uses analytics to understand how the publication is used. The tools do not all operate in the same way.

Umami Analytics

Bitcoin Plaster uses Umami Analytics for website traffic measurement and selected site events, including page activity, lead-magnet interactions, and affiliate-link events.

Umami is used to understand site and content performance. Bitcoin Plaster does not use it to build an advertising profile of individual readers.

More information about Umami's privacy practices is available in Umami's own privacy documentation.

Microsoft Clarity

Bitcoin Plaster uses Microsoft Clarity to understand how visitors move through pages and to identify usability problems. Clarity can reconstruct sessions and process interaction information such as clicks, scrolling, navigation behavior, browser or device information, and related diagnostic data.

Because Clarity is a non-essential analytics tool and can store identifiers in the browser, it loads only after a reader accepts optional analytics. Declining leaves the site fully usable and does not change what can be read or downloaded.

Microsoft processes Clarity data under its own terms and privacy documentation.

Google Analytics

The Bitcoin Plaster site includes support for Google Analytics as an optional analytics service.

Google Analytics loads only when it is enabled in the production environment and a reader has accepted optional analytics. Analytics storage is denied by default. The site's current consent configuration also keeps advertising storage, ad-user-data, and ad-personalization denied.

If Google Analytics is not enabled in the production environment, no Google Analytics processing takes place merely because the site contains support for it.

Google processes analytics data under its own terms and privacy documentation.

Cookies and browser storage

Bitcoin Plaster uses browser storage only where it has an operational or measurement purpose.

The site can use:

Storage type	Set by	Purpose	Essential
Local browser storage	Bitcoin Plaster	Remember an optional analytics choice	No
Session browser storage	Bitcoin Plaster	Temporarily record a lead-magnet or form interaction and limited source information	No
Analytics cookies or similar identifiers	Microsoft Clarity, after consent	Session and usability analysis	No
Analytics cookies or similar storage	Google Analytics, only if enabled and after consent	Optional website analytics	No
Technical or security storage	Hosting or infrastructure providers where required	Delivery, reliability, abuse prevention, and security	Where strictly necessary

Exact cookie names and lifetimes can change when a provider changes its implementation. Where a non-essential technology requires consent, it is covered by the site's optional analytics choice before it loads.

You can clear cookies, local storage, session storage, and other site data through your browser settings.

Affiliate links and outbound clicks

Some Bitcoin Plaster pages contain affiliate links. The commercial relationship and editorial rules are explained separately in the Affiliate Disclosure.

Bitcoin Plaster can route affiliate links through internal addresses beginning with /go/ before redirecting a reader to a third-party merchant or service. The site can record limited event information about that click, such as the source page, placement, campaign, product surface, or destination category.

That internal event is used for measurement and auditing. It is not intended to create a named reader profile.

Once you leave Bitcoin Plaster, the destination website operates under its own privacy policy and may use its own cookies, analytics, checkout systems, account systems, or affiliate identifiers. Bitcoin Plaster does not control those third-party practices.

Service providers

Bitcoin Plaster uses third-party services to operate parts of the publication.

These include:

• Cloudflare for website hosting, delivery, infrastructure, and security functions;
• MailerLite for email subscription forms and email delivery;
• Umami Analytics for website analytics and selected event measurement;
• Microsoft Clarity for optional session and usability analysis;
• Google Analytics, when enabled, for optional website analytics;
• social-media platforms and their official APIs where Bitcoin Plaster uses them to publish and manage its own publication accounts.

Those providers process information under their own terms, privacy policies, contractual arrangements, and legal obligations.

Bitcoin Plaster does not give affiliate partners or advertisers access to its mailing list.

Social-media publishing integrations

Bitcoin Plaster maintains or may maintain authorized publishing integrations with platforms including LinkedIn, X, Facebook, Instagram, and Threads.

These integrations are used to publish and manage content on Bitcoin Plaster's own publication accounts. They can process the publication's account identifiers, authorization information, post text, media, publishing status, and technical information needed to perform those functions.

They are not used to collect social-media passwords from website readers or to obtain access to a reader's private social-media account.

When you interact with Bitcoin Plaster directly on a social platform, that platform processes your activity under its own privacy policy and account settings.

How long information is kept

Bitcoin Plaster keeps personal information only for as long as it is needed for the purpose for which it was collected, for legitimate operational or security needs, or to meet legal and recordkeeping obligations.

The retention criteria currently used are:

• technical and security information is kept only for the period needed for delivery, reliability, abuse prevention, troubleshooting, and the provider's configured security or diagnostic retention;
• analytics information is retained according to the configured retention settings of the analytics service and only for as long as it remains useful for site and content measurement;
• subscriber information is kept while the subscription is active, and afterward only where needed for unsubscribe, suppression, legal, or compliance records;
• correspondence is kept while it remains relevant to a correction, privacy request, dispute, security issue, or appropriate business record.

Where a reader makes a valid deletion request, information is deleted unless applicable law or a legitimate recordkeeping requirement permits or requires it to be retained.

International transfers

Some providers used by Bitcoin Plaster operate outside the country where a reader lives, including outside the European Economic Area.

Where personal data is transferred internationally and applicable law requires a transfer safeguard, Bitcoin Plaster relies on the safeguards available under the relevant provider relationship, including the European Commission's standard contractual clauses where applicable.

A reader who wants information about the transfer mechanism used for a particular provider can ask at contact@bitcoinplaster.com.

Your choices and your rights

Privacy rights depend on where you live, but Bitcoin Plaster aims to handle legitimate privacy requests consistently rather than applying a lower standard simply because a reader lives elsewhere.

Depending on applicable law, you can ask:

• what personal information is held about you;
• for a copy of that information;
• for inaccurate information to be corrected;
• for information to be deleted;
• for processing to be restricted;
• to object to certain processing;
• for information in a portable form where that right applies;
• to withdraw consent you gave earlier.

Withdrawing consent stops future consent-based processing and does not undo processing that was lawful before the withdrawal.

Readers in the European Union and the United Kingdom can have rights under the GDPR and UK GDPR. Readers in California can have rights under applicable California privacy law, including rights to know, delete, correct, and not be discriminated against for exercising a privacy right where those laws apply.

To make a request, write to contact@bitcoinplaster.com and say plainly what you want. Bitcoin Plaster may need enough information to locate and verify the relevant record, usually the email address used for a subscription.

Where the GDPR applies, a request is answered without undue delay and normally within one month. Other jurisdictions can apply different statutory response periods.

A reader who believes personal information has been handled unlawfully can also complain to the relevant data protection or privacy authority. In the European Union, this is the competent national supervisory authority. In the United Kingdom, it is the Information Commissioner's Office. Raising the issue with Bitcoin Plaster first is welcome but is not required.

You can also:

• unsubscribe from Bitcoin Plaster emails using the unsubscribe link in a message;
• decline optional analytics through the site's analytics consent control;
• clear cookies and browser storage through your browser;
• choose not to submit an optional form.

Security

The strongest privacy protection on Bitcoin Plaster is structural rather than promissory.

Bitcoin Plaster is a static website. It has no reader accounts, no reader login, no stored reader passwords, no shopping cart, and no payment processing, and it keeps no reader account database of its own. Subscriber email addresses are handled by the email service provider rather than stored in a reader-account system on bitcoinplaster.com.

That architecture removes many of the common ways a publication website can expose reader data, and it is a deliberate part of keeping the site simple.

What remains is protected with ordinary technical and organisational measures. No website, email system, transmission method, or storage service can honestly be described as completely secure, so avoid sending sensitive information through ordinary email or website forms.

Never send Bitcoin custody secrets to Bitcoin Plaster, or to anyone claiming to represent it.

Children's privacy

Bitcoin Plaster is written for a general adult audience and is not directed at children under 16.

Bitcoin Plaster does not knowingly seek personal information from children under 16. If you believe a child has provided personal information that should be removed, contact contact@bitcoinplaster.com.

Third-party websites

Bitcoin Plaster links to third-party websites for sources, products, social platforms, tools, and other resources.

This Privacy Policy applies to Bitcoin Plaster. It does not control the privacy practices of websites or services operated by other organizations.

Review a third party's privacy policy before providing personal information to that service.

Changes to this Privacy Policy

Bitcoin Plaster updates this Privacy Policy when the website, analytics setup, service providers, email system, social publishing integrations, or legal obligations change.

A change that materially affects readers is called out on this page rather than made as a silent edit.

The date at the top shows when this policy was last updated.

Contact

For privacy questions or requests:

Bitcoin Plaster
Email: contact@bitcoinplaster.com
Website: https://bitcoinplaster.com/

For factual corrections, disclosure concerns, broken links, outdated guidance, or other editorial issues, use the Contact & Corrections page.