Privacy Policy

Draft updated: 7 September 2026

Draft, not yet finalized. The operator's identity, hosting configuration, retention periods and international-transfer arrangements still need confirmation before this policy is complete.

1. Who operates this website

This policy covers extorted.xyz and its profile pages. For privacy questions and requests, email ExtortedXYZ@proton.me. You can also contact Discord username ut0z.

2. Website delivery and security

Our website code does not create visitor access logs or save visitors' IP addresses, browsing histories or browser details. Your browser still exchanges connection data, including your IP address, with the hosting provider so that pages can load. This technical exchange is different from storing a record of your visit.

This describes our own website code, not a guarantee that the hosting provider keeps no logs. Provider-side processing and retention depend on the hosting configuration and must still be confirmed. The proposed legal basis for necessary website delivery is legitimate interests in providing the website (Article 6(1)(f) GDPR).

The project is prepared for Cloudflare Pages. Actual deployment, enabled security features and log retention must be confirmed. If used, Cloudflare processes request data and may process it outside the EEA. Applicable transfer safeguards and processor arrangements must be verified. See Cloudflare's Privacy Policy.

3. Profiles and contact

Profile names, biographies, pictures, media and links supplied for publication are visible to visitors and may be copied or indexed elsewhere. Requests made through Discord are also processed by Discord. The operator still needs to confirm the legal basis for publishing profile information and the retention period for profiles and correspondence.

4. Support goal and wallet data

The server checks the site's published BTC, LTC, ETH and SOL addresses using mempool.space, Blockstream, BlockCypher, Solana RPC and PublicNode, and retrieves USD prices from CoinGecko or Coinbase. These calls do not forward visitors' IP addresses or browser details to those providers. Public wallet balances and a timestamp are cached to keep the goal available during outages. Blockchain transfers are public and cannot be erased by this website.

5. Browser storage and media

The support goal stores its latest result under extorted-crypto-goal-v1 in localStorage. It contains public balance data and an update time, not a visitor identifier. It remains until replaced or browser site data is cleared. The applicable consent or storage exemption must be checked before publication.

The page-view counter uses a first-party cookie named extorted_view_device containing a random browser identifier. It expires five hours after the most recent counter registration request. This lets each browser add at most one view per page within five hours. Cloudflare D1 stores cumulative counts plus a page-specific hash of this identifier and a cooldown expiry time. Expired cooldown records are deleted during subsequent registrations; aggregate counts remain until reset or deleted. The counter does not store IP addresses or use device fingerprinting. Browsers that block this cookie are not counted. Clearing cookies or using another browser can bypass the limit. The applicable consent or cookie exemption still needs to be confirmed before publication.

The reviewed site code has no advertising or third-party analytics scripts. Hosting-level features may differ and still require verification. Profile audio, video, fonts and images are served as site assets. Copy buttons write the selected public address or username to your clipboard only when clicked.

6. External links

Social and payment links take you to other providers when opened. Their own privacy policies apply there.

7. Your rights

Where applicable, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You may complain to a data protection supervisory authority. Contact the operator to make a request.

No automated decisions with legal or similarly significant effects are implemented in the reviewed code. Providing profile information is voluntary; connection data is needed to deliver the website.

8. Policy updates

This notice must be updated when the site's services or data practices change. Legal reference: General Data Protection Regulation.