Privacy Policy

HashedMax Unity Pool ("we", "us", "our", "the Pool") is committed to protecting your privacy and complying with applicable data protection laws, including the European Union's General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA").

This Privacy Policy explains what information we collect, how we use it, your rights regarding your data, and how to contact us with privacy-related questions.

By using our services, you consent to the data practices described in this policy.

Service Name: HashedMax Unity Pool

Website: https://hmpool.io

Contact Email: info@hashedmax.com

For GDPR-related inquiries, you may contact us at the email address above with "GDPR Request" in the subject line.

3.1 Information You Provide

Bitcoin Addresses: When you connect mining hardware to our pool, you provide a Bitcoin address for receiving payouts. This is the primary identifier for your mining account.

Worker Names: You may optionally configure worker names in your mining software to identify different devices.

Contact Information: If you contact us via our contact form or email, we collect your name, email address, and any information you choose to provide in your message.

3.2 Information Automatically Collected

IP Addresses: We collect IP addresses when you connect to our stratum mining servers or access our website. IP addresses are used for connection management, security, fraud prevention, and sanctions compliance (OFAC).

Mining Statistics: We collect and store mining performance data including hashrate, share submissions (valid and invalid), difficulty, timestamps, and block contributions.

Device Information: We collect user agent strings from your mining software, which may include device type, firmware version, and software name (e.g., "bitaxe/BM1370/v2.12.0").

Website Analytics: We use Google Analytics to collect information about website usage, including pages viewed, time on site, browser type, and referring websites. Google Analytics uses cookies and similar technologies. See Section 5 for cookie information.

3.3 Information We Do NOT Collect

We do not require or collect:

• Names, physical addresses, or government-issued IDs
• Email addresses (unless you voluntarily contact us)
• Payment card or bank account information
• Social security numbers or tax identification numbers
• Biometric data

No Account Registration: Our service does not require account creation. You mine using only your Bitcoin address.

We use the collected information for the following purposes:

4.1 Service Provision (Contractual Necessity)

• Processing and distributing mining rewards to your Bitcoin address
• Calculating your share of block rewards using the PPLNS method
• Displaying your mining statistics and performance metrics
• Managing connections from your mining hardware
• Processing payouts according to our payout policy

4.2 Security and Fraud Prevention (Legitimate Interest)

• Detecting and preventing fraudulent mining activity
• Identifying and blocking invalid share submissions
• Preventing denial-of-service attacks
• Enforcing our Terms of Service

4.3 Legal Compliance (Legal Obligation)

• Complying with U.S. OFAC sanctions by blocking connections from prohibited jurisdictions
• Responding to lawful requests from law enforcement or regulatory authorities
• Maintaining records as required by applicable law

4.4 Service Improvement (Legitimate Interest)

• Analyzing pool performance and optimizing infrastructure
• Understanding user behavior to improve our website and services
• Developing new features and rewards programs

4.5 Communications (Consent / Legitimate Interest)

• Responding to your support requests or inquiries
• Sending important service announcements (e.g., payout threshold changes, downtime notices)
• Notifying inactive miners about pending balances (if contact information is available)

Our website uses cookies and similar tracking technologies:

5.1 Essential Cookies

We use session cookies to maintain your preferences while browsing the site (e.g., remembering your Bitcoin address for the miner dashboard). These cookies are necessary for the website to function properly.

5.2 Analytics Cookies (Google Analytics)

We use Google Analytics to understand how visitors use our website. Google Analytics uses cookies to collect information such as:

• Pages visited and time spent on each page
• Browser type, device type, and screen resolution
• Geographic location (country/city level)
• Referring website or search terms

Google Analytics data is anonymized and aggregated. For more information about how Google uses data, visit: https://policies.google.com/privacy

Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically:

• View and delete cookies
• Block third-party cookies
• Block all cookies (note: this may impair website functionality)
• Receive notifications when cookies are set

Consult your browser's help documentation for specific instructions.

We do not sell, rent, or trade your personal information to third parties.

We may share your information only in the following limited circumstances:

6.1 Service Providers

We may share data with trusted third-party service providers who assist in operating our services, such as:

• Cloud hosting providers (server infrastructure)
• Analytics providers (Google Analytics)
• Email service providers (for contact form responses)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, warrants)
• Government or regulatory requests
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety, or that of our users or the public

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via our website of any such change in ownership or control.

6.4 Public Information

Mining statistics (hashrate, shares, worker names) associated with your Bitcoin address are publicly visible on our website and API. Bitcoin addresses and blockchain transactions are inherently public information.

We retain your information for as long as necessary to provide our services and comply with legal obligations:

7.1 Active Mining Data

Mining Statistics: We retain detailed mining statistics (shares, hashrate, workers) for active miners indefinitely to support our rewards program and historical performance tracking.

Pending Balances: Balance information is retained until paid out according to our payout policy (see Terms of Service).

7.2 Inactive Accounts

For miners who have not submitted shares for 2 years, we may archive or delete detailed mining statistics while retaining summary data for historical pool performance records.

7.3 IP Address Logs

IP address logs are retained for 90 days for security and fraud prevention purposes, then automatically deleted.

7.4 Contact Form Submissions

Messages submitted via our contact form are retained for 1 year or until the inquiry is resolved, whichever is longer.

7.5 Legal Retention

We may retain certain data for longer periods if required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes.

HashedMax Unity Pool operates servers located in the United States. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States.

For European Users (GDPR): The United States may not provide the same level of data protection as your home country. However, we implement appropriate safeguards to protect your data in accordance with this Privacy Policy and applicable law.

By using our services, you consent to the transfer of your information to the United States.

Depending on your location, you may have certain rights regarding your personal information:

9.1 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under GDPR:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 CCPA Rights (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights

9.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: info@hashedmax.com

Subject Line: "Privacy Rights Request" or "GDPR Request" or "CCPA Request"

Please include:

• Your Bitcoin address (to verify your identity)
• The specific right you wish to exercise
• Any additional information needed to process your request

We will respond to your request within 30 days (GDPR) or 45 days (CCPA), or notify you if we need additional time.

9.4 Limitations

Certain rights may be limited by legal requirements or operational necessity. For example:

• We cannot delete data required for legal compliance or pending payout processing
• We cannot modify blockchain transaction records (Bitcoin addresses and payouts are immutable)
• We may retain certain data for fraud prevention and security purposes

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All website traffic uses HTTPS/TLS encryption
• Access Controls: Database access is restricted to authorized personnel only
• Secure Infrastructure: Servers are hosted in secure data centers with physical and network security
• Regular Updates: We keep our systems and software up to date with security patches
• Monitoring: We monitor for suspicious activity and unauthorized access attempts
• Data Minimization: We collect only the data necessary for service operation

No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your mining hardware and Bitcoin wallet.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@hashedmax.com and we will delete such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage
• Notify users via email if we have contact information on file (for significant changes)

Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@hashedmax.com

Contact Form: https://hmpool.io/contact.html

For GDPR-specific inquiries: Include "GDPR Request" in the subject line

For CCPA-specific inquiries: Include "CCPA Request" in the subject line

We will respond to all privacy-related inquiries within 30 days.