garlicoin.orgPrivacy
What garlicoin.org keeps about you, why, and for how long.
In short
- No accounts, no ads. We never sell or share your data.
- Private keys and passphrases never leave your browser.
- The web server log (with your IP) is deleted after 14 days.
- Faucet payouts, lotto entries, paid features and marketplace orders are kept. Anything on the blockchain is public and can't be removed.
- One cookie of our own: a random ID that enforces the faucet and lotto limits. Never used for ads or tracking.
- Your settings, searches and wallet contacts stay on your device.
- Cloudflare, the captcha and ip-api.com see some of your traffic.
- Questions, or want a listing or product removed? Ask in the Garlicoin Discord.
Full text
- No accounts and no ads. We don't sell or share data with anyone.
- Private keys stay in your browser. The gift card maker, vanity addresses, message signing and gift card claims do all key work on your device, and those pages can only run this site's own code.
- The blockchain is public and permanent. Anything you write on the wall, a garlic name, a payment: anyone can see it, forever, and nobody (us included) can remove it.
- Settings live on your device. Your theme, game high-score name, seller key, garlic name edit links and the last address you looked up on Your garlic are kept in your browser's storage, not on our server. So are the wallet's contacts, payment notes, badges, savings watch list and gift links (they go into the wallet's encrypted backup if you save one).
- One cookie of our own. The faucet and Block Lotto set
grlc_fb, a random ID with nothing else in it, so that one browser gets one roll per 8 hours and one lotto entry per day. It's only used for that, never for ads or tracking across sites. - Search stays in your browser. The search box looks through a list of pages it downloads; what you type isn't sent to us.
What our server keeps
| When you… | We keep | For |
|---|---|---|
| Visit any page | The web server log: your IP address, the page address (including anything typed into it, such as an address you checked), browser type | 14 days |
| Hit a script error on a page or in the wallet | The page, the error message, our script file and line, and your browser family (e.g. "Firefox mobile"). No IP: only a code that changes daily, to count visitors and stop floods. | 30 days |
| Have a page open | The "people here now" count: a random number for the tab, the page and the time. No IP. | 10 minutes |
| Use the faucet | Your address, IP and browser ID, to enforce the 8-hour wait; the payout (address, amount, transaction); with each payout, your IP, browser ID and browser type, to spot one person rolling with several addresses | 8 hours; payout IP, browser ID and type 14 days; payouts kept |
| Enter Block Lotto | Public: your address, in that day's list of entries, so anyone can recheck the draw. Private: your IP, network, browser ID, browser type and country, to keep it one entry per person | Kept with the draw |
| Post a game high score | The name you chose, the score, your IP (to stop flooding) | 60 days, or longer if it's an all-time top score |
| Check an address's balance, claim a gift card, or make a gift link | The address, the result and your IP, as a short cache and to stop abuse. Never the key: a gift link's key sits after the # in the link, which browsers don't send to any server. | 1 day |
| Look up an address on Your garlic | Nothing new: it only reads what's already public (names, faucet payouts, Block Lotto entries and wins, high scores, paid features). Its balance check is the row above | Web server log only |
| Use the wallet | Nothing of your key or passphrase: they never leave your browser. To look up your coins and relay what you send, we see your wallet's addresses, your IP and the signed transaction, like any wallet server. | 1 hour (request log) |
| Open a payment screen | The address being watched, your IP, and payments it showed | 30 days |
| Sell a file or code | Your name, payout address, what you sell (including the hidden part buyers get) and a scrambled copy of your seller key | Until you remove it |
| Pay for a wall message, name or other feature | What you paid for, the payment and the address it came from (also listed on Your garlic); your IP to stop flooding | Kept (it's on the chain anyway) |
| Sell on the marketplace | Public: your listing, its photos (re-encoded, so camera details and location are dropped), your wallet's public key and address, and your ratings. Private: your IP, to stop abuse | Until you remove the listing; ratings kept |
| Buy or sell through a marketplace order | The order (both wallets' public keys and addresses, the amount, its steps and transaction IDs) and your messages, which are encrypted in your wallets so we can't read them | Kept, so ratings and the trade history stay checkable |
| Report a listing | The reason you gave and your IP | Until it's dealt with |
| Add a shop to the directory | The listing, your contact if you gave one (never shown), your IP | While listed |
| Use the wallet | Anonymous daily totals the wallet reports, like "a wallet was used today" (once a day, week and month, remembered on your device), "a wallet was made", its language, and whether it's installed or has notifications on. No address, key or anything that identifies you or your wallet. | Daily totals kept |
| Wallet notifications ("Notify me when I'm paid") | Your wallet's addresses, your browser's notification address and its encryption keys, your language, and a code that changes daily instead of your IP (to cap new sign-ups); with price alerts, the size you picked, your currency and the price at the last alert; with the daily lotto reminder, that you want it and the last day one was sent. Lotto winners get a "You won" notice through the same notifications | Until you turn them off (or the browser drops them) |
| Discord pings (payment screen, seller settings) | The address, your webhook URL and the name you gave, your IP; each payment's message until it's sent | Until you stop them (messages: 2 days) |
Backups: an encrypted copy of the site's database and files is made daily. It's kept on this server (daily copies for 14 days, the first of each month for 6 months) and in private Cloudflare R2 storage (daily copies for 35 days, the first of each month for 12 months). Deleted data can stay in a backup until it expires. Only the site's owner can open them.
Other services involved
- Cloudflare carries all traffic to garlicoin.org, so it sees what any web host sees.
- Captcha (Google reCAPTCHA or Cloudflare Turnstile) on the faucet and lotto, which may set its own cookies.
- ip-api.com gets your IP address (at most once a day) when you use the faucet or lotto, to block VPNs, proxies and datacenter connections.
- Community Electrum servers (listed on the status page) see addresses you look up or claim from, and the signed transfer. They see our server's IP, not yours.
- Discord receives the payment pings you set up, in your own channel.
- Links out, such as the block explorer, Discord or Reddit, follow those sites' own rules.
Questions
Ask in the Garlicoin Discord. To have something of yours removed from our server (a shop listing, a product you sell), ask there and we'll do it. Nothing on the blockchain can be removed.
Last updated November 3, 2026.