Privacy & Cookie Policy

Last updated: October 17, 2026

This policy explains what personal data whattomine.com ("WhatToMine", "we") collects, why, who processes it on our behalf, which cookies we use and what your rights are. The Terms of Use are on a separate page.

Who is responsible for your data

The data controller is the operator of WhatToMine. Contact: [email protected] or the contact form.

What we collect and why

When you visit the site

Server and security logs: IP address, browser user agent, requested URL and time. Used to run the site, block abuse and scrapers, and debug errors. Kept only as long as needed for these purposes.
Our own page statistics: country (derived from your IP address with a local MaxMind GeoLite2 database; the IP address itself is not stored), browser, device type, whether an ad blocker is active, and the page path. Used to understand which pages are used.
Calculator settings: hashrates, power costs, selected hardware, exchanges, currency and saved datasets are stored in cookies in your browser (see Cookies).

If you create an account

Email address and a hashed password (we never see your password).
Sign-in count, times and the IP addresses of the current and previous sign-in, to protect your account.
Saved calculator datasets, custom GPUs and ASICs, and API keys with daily usage counts.

We keep this data until you delete your account in Settings. Deletion is immediate and permanent.

If you subscribe

Payments are handled by Paddle, which acts as merchant of record and processes your payment and billing details as an independent controller. We receive and store only your Paddle customer and subscription identifiers, subscription status and the billing details you add for invoices. We never see your card details.

If you contact us or suggest a pool

Your name, email address and message are emailed to our inbox so we can reply. They are not stored in our database.

If you are a hardware seller partner

Your email address, password hash and the offers you manage in the partner portal.

Advertising

The site is free because it shows ads. Ads are served by Sevio through Google Ad Manager and its advertising partners, who may use cookies and similar identifiers to select, measure and limit ads. Visitors from the EEA, the UK and Switzerland are asked for consent first through Google's consent tool (IAB TCF). You can change your choice at any time with the Cookie Settings link in the footer. Subscribers don't see ads.

We also check whether ads were blocked, to show a subscription hint, and load an ad-recovery script from html-load.com.

Analytics

Google Analytics 4 measures visits and page views with cookies. In the EEA, the UK and Switzerland it follows your consent choice.
Cloudflare Web Analytics counts page loads and performance without cookies.

Services that process data for us

Service	Purpose
Cloudflare	CDN, DNS, bot and abuse protection, Turnstile checks on forms, file storage (R2), Web Analytics
Hetzner	Application servers and database
Amazon Web Services (SES)	Sending emails from the EU: sign-in links, account confirmation, password reset, form messages
Sentry	Error reports, which can include your IP address, user ID and request details
Paddle	Subscription checkout, payments, invoices, taxes
Google	Ad serving (Ad Manager), consent tool, Analytics
Sevio	Ad management
jsDelivr, unpkg	Delivering open-source JavaScript libraries (receive your IP address like any web request)

Some of these providers are in the USA or other countries outside the EEA. Transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. We don't sell your personal data.

Cookies and local storage

Name	Set by	Purpose	Duration
`_WhatToMine_session`	WhatToMine	Sign-in state, form security, display preferences	Browser session
`remember_user_token`	WhatToMine	"Remember me" sign-in	2 weeks
`wtm_gpu_`, `wtm_asic_`, `wtm_cpu_*`	WhatToMine	Saved calculator datasets (also kept in your account when signed in)	Persistent
`dismissed_global_notification_ids`	WhatToMine	Remembers announcements you closed	Persistent
`theme` (local storage)	WhatToMine	Light or dark mode	Until cleared
`__cf_bm`, `cf_clearance`	Cloudflare	Bot protection	30 minutes to 1 year
`FCCDCF`, `FCNEC`	Google	Stores your consent choice	Up to 13 months
`_ga`, `_ga_*`	Google Analytics	Distinguishes visitors	Up to 2 years
`__gads`, `__gpi`, `__eoi`, `IDE` and other ad cookies	Google and ad partners	Ad selection, frequency capping, measurement	Up to 13 months
Paddle cookies	Paddle	Checkout and fraud prevention, only on the subscription page

The WhatToMine and Cloudflare cookies are needed for the site to work and don't require consent. You can delete or block cookies in your browser; the calculator then falls back to default values.

Legal bases (GDPR)

Contract: your account, subscription and API keys.
Legitimate interests: running and securing the site, our own statistics, error reports, replying to messages.
Consent: personalised advertising and analytics cookies in the EEA, the UK and Switzerland.
Legal obligation: billing records, kept by Paddle as merchant of record.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. You can withdraw consent at any time with Cookie Settings. Email [email protected]; we reply within one month. You also have the right to complain to your data protection authority. Residents of US states with privacy laws have similar rights to know, delete and correct their data, and to opt out of targeted advertising through the consent tool.

Children

The site is not aimed at children under 16 and we don't knowingly collect their data.

Changes

We update this page when we add or remove services. The date at the top shows the last change.