Legal

Privacy Policy

We’re privacy people. We built a platform on the premise that public data should be examined in the open, so here is our own policy in the same spirit: short, plain and complete.

Last updated: 2 September 2026

This policy covers the Flow platform and this website, operated by the operators of Flow. The short version: no ads, no trackers, no third-party analytics, no selling or sharing of personal data. Like every web service, our servers keep operational logs; they are described under Service logs below.


What we don’t do

By design, and verifiably — this site loads nothing from anyone else’s servers:


On-chain data is not data about you that we collected

The Bitcoin transactions, addresses, clusters, and network observations displayed on Flow come from the public Bitcoin blockchain and the public peer-to-peer network — records that are, by Bitcoin’s design, permanently readable by anyone on Earth. We did not collect them from you and cannot remove them from the chain; no one can. This policy covers the personal data we collect when you use the platform — the short list below — not the public ledger itself.


Cookies

One. A session cookie, set when you log in, whose only job is keeping you logged in. It is httpOnly (unreadable by scripts), Secure (HTTPS only), and SameSite-restricted, and it identifies your session — it does not track you across the web, and nothing else reads it. Without an account, you get no cookie at all. There is no cookie banner on this site because there is nothing to consent to.


What we collect

Account data

If you register: your email address and a display name (pseudonyms welcome), plus what you create on the platform — saved graphs, published share links, attributions, and votes. That’s the whole account.

One session cookie

Logged-in sessions use a single, strictly functional cookie. Details in Cookies. There are no other cookies.

Newsletter

If you opt in to the newsletter, we use your account email to send it. Opting out stops it; the opt-in flag is just a setting on your account.

Enterprise and acquisition inquiries

The contact forms on the pricing and acquisition pages collect only what a reply requires: a name or alias, an organization, a contact email, and your message. Correspondence is kept only as long as the conversation is active, is never shared with third parties, and pseudonymous contact is fine.

Service logs

Like any web service, our servers keep operational logs. For Flow these record what was looked up (an address, transaction or cluster), the requesting IP address and browser, the time, and, for signed-in users, the account ID.

They exist to keep the service healthy: stopping scraping and systematic enumeration, absorbing denial-of-service attempts, debugging problems, watching quality of service, and computing the statistics behind public features such as leaderboards and most-searched addresses. They are never used to profile or market to you, never sold, and never shared (see Disclosure). The public statistics derived from them carry no IP addresses. The app also reports errors it runs into (the error message, the page and the browser) so we can fix them, and the bug-report button sends what you type plus those same page details.


How long we keep it


Your rights

Delete your account from its settings, or write to us at the address below, and we delete your account data — email, display name, settings, saved graphs. Two honest caveats:

You can also ask us what we hold about you; the answer will be short.


Disclosure

We disclose personal data only when compelled by valid legal process binding on the operator, and only the minimum the process requires. What exists to disclose is our service logs and whatever account data you’ve given us. We have no advertising relationships, no analytics vendors, and no data-sharing agreements — there is no one to “share” with.


Changes to this policy

If this policy changes, we’ll update this page and its date, and flag material changes prominently on the platform. We will not quietly expand what we collect — a change that collects more than this page describes counts as material.


Contact

Privacy questions and deletion requests: privacy@followthesats.com.