Privacy

The short version

Our website sets no cookies. On some event pages, the Nostr group chat keeps a cache in your browser's storage.
We count visits with Umami, an analytics tool that doesn't use cookies.
Forms send us only what you type, plus your IP address and browser details, and only when you press the button. We keep your name and email on our own server and with Resend, the service that sends our emails.
Some pages load content from other services when they open, such as the Nostr group chat and the video on the Learn Nostr page. The Strava widget, the YouTube video and BTC Map only load when you press a button, and may set their own cookies once you do.
Anything you post in the Nostr group chat is public and permanent. On-chain bitcoin donations are public on the blockchain.
To see, correct or delete your data, email hello@bitcoinrunners.org.

Who we are

This site is run by the volunteers of Bitcoin Runners, an open-source running club that doesn't make a profit. Details you send through our forms go to our organisers, not to the public, unless this page says otherwise. For anything about your data, contact us at hello@bitcoinrunners.org.

When you browse the site

Hosting

The site is hosted by Netlify. Like any web host, Netlify's servers receive your IP address, your browser details and the address of each page you request, and keep them in their logs under Netlify's own retention policy.

Visitor statistics

We use Umami Cloud to see which pages are popular. It sets no cookies. For each page view it receives the full page address and title, the address of the page that linked you here, your browser and device type, your screen size and language, and your IP address. Umami uses your IP address and browser details to recognise repeat visits to this site for up to a month, and to estimate your country, region and city. Umami says it doesn't link your visits here with visits to other websites.

Our setup doesn't respond to your browser's Do Not Track setting. To opt out, use a tracker blocker such as uBlock Origin, or your browser's built-in tracking protection.

Content from other services

Some pages show content hosted elsewhere. Your browser then connects to that service, which receives your IP address and browser details.

Loaded when you open the page

Primal: the video on the Learn Nostr page is streamed from Primal's media server.
Nostr group chat: some upcoming event pages have a Nostr group chat, which starts when you open the page. Your browser connects to public Nostr relays (relay.damus.io, nos.lol, relay.snort.social, relay.primal.net, purplepag.es and hist.nostr.land). It also fetches a spam list from spam.nostr.band about once a day, loads stand-in pictures from robohash.org, and loads people's profile pictures and any images in their posts from wherever those are hosted. All of these receive your IP address. You don't need to sign in to read. The chat keeps a cache of posts and profiles in your browser's storage until you clear this site's data in your browser settings. If you sign in with a Nostr browser extension, it also saves your public key there. Anything you post or react with is signed with your Nostr key and published publicly and permanently on Nostr relays. We can hide a post from the chat on our pages, but it stays on Nostr and other Nostr apps can still show it.

Partner logos, profile pictures, event flyers and news link previews are stored on and served from our own website.

Loaded only when you choose

Strava: the club activity widget on the home page loads only after you press "Show club activity". Strava may then set its own cookies.
YouTube (Google): the video on the Learn Bitcoin page loads only when you press play. It comes from YouTube's privacy-enhanced address, youtube-nocookie.com, and YouTube may set cookies once the video plays.
BTC Map: the map on the Community page loads from btcmap.org and its map servers only after you press "Load the map".
Links to other websites, such as Telegram, X, Strava, Meetup and Luma, only take you there when you click them.

Things you send us

Our own server

Our forms, RSVPs, donation checkout and Lightning addresses run on our own server, rented from Hostinger and located in Lithuania. When you send a form, the server receives your IP address and browser details. If our spam filter blocks a submission, it may log the name or email address involved. Our server's logs are deleted after 7 days.

If you sign up, we store your email address with Resend, the service that sends our emails, and send you a welcome email. We don't ask you to confirm, so if you get our emails without signing up, tell us and we'll remove you. If you use a Gmail address, we store it without dots or anything after a plus sign, so j.smith+runs@gmail.com is stored as jsmith@gmail.com. Gmail still delivers it to you. Our organisers also get an email about each new signup.

Every newsletter, and the welcome email, has an unsubscribe link at the bottom. Click it and confirm, and we stop sending you newsletters straight away. Many email apps also show their own unsubscribe button, which does the same thing. When you unsubscribe, we keep your email address with Resend, marked as unsubscribed, so our newsletters skip it and our organisers can see that you left. If you'd like it deleted completely, email hello@bitcoinrunners.org and we'll remove it.

Event RSVPs

When you RSVP to an event on our site, we collect the name or nickname and email address you enter. We keep them on our own server and on an organiser's computer, add them to a mailing list for that event at Resend, and send you a confirmation with a calendar file. We also email you a reminder about a day before the event and another shortly before it starts. Our organisers are notified of each RSVP.

Our confirmation and reminder emails don't have an unsubscribe link. To cancel your RSVP or stop reminders, email hello@bitcoinrunners.org. If you get an RSVP email for an event you didn't sign up for, tell us and we'll remove you. Some events use another site, such as Meetup or Luma, for RSVPs. That site's own privacy policy then applies.

Host an event form

When you suggest an event, we collect your name or nickname, your email address and the event details you enter. We keep them on our server and on an organiser's computer. We email a copy to the address you entered and to our team inbox, and use your details to reply. If we take your event forward, we keep your name and email with our own record of it. We may first put a draft on an unlisted page of our site to share with the people arranging it. Drafts and published events show the event name, date, place and the description you wrote, and may be shared on Nostr. We don't publish your name or email address unless you ask us to credit you.

Donations

Donations go through our own BTCPay Server, which runs on our server. A small function on Netlify creates the invoice. We record the amount. For donations of $50 or more you can also give us your Nostr public key (npub), your X handle, or both. We ask for these so we can thank you on our Donate page, where we show supporters' profile pictures and handles publicly. To find your picture, we look up your public Nostr profile or your X account. Leave both fields empty if you'd rather not be shown, or email us to be removed later. Our team inbox gets an email about each donation with these details.

When you open the checkout, BTCPay sees your IP address and browser, and records the amount, the time and how you paid. On-chain bitcoin payments are public: anyone can see the amount and the addresses on the blockchain. Lightning payments aren't recorded on the blockchain, but they aren't anonymous. Our Lightning node connects to the Lightning network through ACINQ, the company behind the Phoenix software we use, which can see the payments it carries.

Lightning addresses

Payments to Lightning addresses ending in @bitcoinrunners.org pass through Netlify to our own LNbits server. Both receive the amount, the IP address of your wallet or wallet provider, and any comment or payer details, such as a name or email address, that your wallet chooses to send. These payments also go through ACINQ, as described above.

Emails we send you

Most of our emails show the Bitcoin Runners logo, which is loaded from our website. If your email app loads images, our host receives your IP address at that moment. We don't use open or click tracking. Most email apps let you turn off automatic image loading.

What we publish

Some information is public by design:

the names, profile pictures and social links of people and organisations we credit or thank, event hosts and merch makers;
photos from our events, and Proof-of-Shirt photos people send us or tag us in;
event details, which can include text written by the person who suggested the event;
supporters on our Donate page who gave us a Nostr key or X handle with a donation;
the Nostr usernames ending in @bitcoinrunners.org that we host for some members;
event listings we share on Nostr.

If you're shown and would like something changed or removed, email us. We can't always remove things from Nostr, because it's a public network that we don't control.

Services that handle data for us

Netlify (United States): website hosting, our donation function, and passing Lightning address payments to LNbits.
Umami (United States): cookieless visitor statistics.
Resend (United States company; our emails are sent from its EU region in Ireland): sending emails and keeping our newsletter and event mailing lists.
Proton Mail (Switzerland): our team inbox. It receives newsletter signup, RSVP, event suggestion and donation notifications, and any email you send us.
Hostinger (our server is in Lithuania): runs our forms, RSVPs, BTCPay Server, LNbits and our Lightning node.
ACINQ (France): connects our Lightning node to the Lightning network.

Strava and YouTube (Google), whose content you can load on some pages, are United States companies too. This means your data may be handled outside the country you live in.

How long we keep it

Newsletter: while you're subscribed. If you unsubscribe, your address stays with Resend, marked as unsubscribed so it gets no more newsletters, until you ask us to delete it.
RSVPs: kept after the event as a record, on our server, on an organiser's computer and on that event's mailing list at Resend. Nothing is deleted automatically. Ask us and we'll delete them.
Event suggestions: kept on our server and an organiser's computer, whether or not the event goes ahead, until you ask us to delete them. If we accept your suggestion, your name and email stay with our private record of the event.
Donations and Lightning payments: kept in BTCPay Server and LNbits as records of the payments.
Emails to our inbox: until we delete them.
Server logs: 7 days on our server. Netlify keeps its own logs under its own policy.
Visitor statistics: kept by Umami under its own policy.
Backups: each time we update the site, our server saves a copy of our data, including RSVPs and event suggestions, and an organiser's computer keeps copies too. Each keeps the last 30 copies, so deleted information can stay in a backup for several months.
Nostr group chat cache: stays in your browser until you clear this site's data.
Posts on Nostr: public and permanent. We can't delete them.

Your choices

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email hello@bitcoinrunners.org and tell us which email address or name to look for. We delete things by hand from our server, our organisers' computers, our mailing lists at Resend and our inbox, and we'll tell you when it's done. Copies in our backups are removed only when those backups are replaced. We can't remove anything that has been published on Nostr. We're volunteers, but we'll reply as soon as we can.

You can also block analytics and embedded content with a tracker blocker, turn off automatic image loading in your email app, and use a nickname instead of your real name when you RSVP.

Children

This site is for adults. If you're under 18, please ask a parent or guardian before you subscribe, RSVP, suggest an event or donate. If you think someone under 18 has sent us their details without permission, email us and we'll delete them.

Changes to this page

If we change how we handle data, we'll update this page and the date at the top.

Your data on this site