> datenschutz
Privacy – what we store and what we never have
We can block, we never read. cypherpunk2077.com manages names in Mainnet. This page lists completely which data the registry holds, why and for how long – and what we never have.
The German version is binding. Deutsch →
This portal
- No cookies, no trackers, no ads. Fonts, styles and images come from the portal itself; there are no scripts and no third-party content.
- No IP logs – this is a promise you cannot verify. The program is never even given the address of the other side. Only method, page pattern (not the actual path, no search query), status and duration are logged; the retention period is still open (proposal: 14 days).
- During a connection your IP address is technically visible (to the relay server in front and to the portal) and is not stored. Through the onion address or the Mainnet Browser we never see it.
- Visitor counter: daily totals only – views per section, per language and per kind of search engine. No IP address (not even hashed), no cookie, no fingerprint, no unique visitors. Kept for at most 10 years.
- Domain check, WHOIS and search: inputs are not stored. The portal forwards search queries to independent indexers – without your IP address. The rate limit counts only in total, not per visitor.
Public – visible to everyone
| Data | Purpose | How long |
|---|---|---|
| Registry log: domain, public owner key, expiry date, measures with reason code, checksum of the payment (no amount, no address) | Who owns which name, what the registry decided and when | forever – the log cannot be changed |
| Content block list: only one-way identifiers of revoked content | Revoked content cannot be offered again under a new name | permanently, until an entry is removed |
| Domain card (optional): title, description, language, keywords | Findability on the normal internet | as long as the domain exists and you want to show it |
| WHOIS and RDAP | Information like for normal domains – generated only from the log, without personal data | not stored separately |
| Donations to the fixed donation address | Funding – amounts and balance are on the Bitcoin blockchain | forever; we do not learn who donates |
Only with the registry – as long as needed
Only the operator sees this data. Periods that have not been decided yet are marked “open”.
| Data | Purpose | How long |
|---|---|---|
| Chats with us (purchase, report, appeal, question) | the conversation | encrypted, in memory only, at most 72 hours; immediately on “delete conversation” |
| Order: domain, public key, decision | process and proof of activation | while the domain exists, then 1 year; without payment 30 days |
| Customer key and refund address | recognise repeat offenders, pay refunds | 30 days after completion |
| Bitcoin payment: receiving address, amount, transaction | match payments, bookkeeping – this is the strongest link at the registry. Bitcoin is public: pay from your own wallet if you can | as long as tax law requires (in Germany up to 10 years; to be clarified with a tax adviser) |
| Payment proof – only if you send it yourself (e.g. you paid to the donation address by mistake): sending address and signature | resolve special cases | until 30 days after the case is closed, open cases at most 90 days |
| Flag after rule violations (one-way identifier of your customer key) | recognise new orders from repeat offenders | warning up to 2 years; block currently without limit (period open, lawyer) |
| Reports (address, reason, text) – without sender data | handling under the terms of use | open – proposal: 30 days after closing |
| Evidence in serious cases: domain, keys, log entries, times, report text – never the material itself | handing over to the competent authorities | encrypted; period open (lawyer) |
| Reminders 5, 3 and 1 week before expiry | not missing the expiry | we only remember which reminder was sent |
We never have
- your seed and your private keys
- your mail – not even encrypted
- your website content, copies or thumbnails
- which sites you visit
- an account, a password, a cookie
- your name, e-mail address, phone number or an ID
- information about people who report something
There is no master key and no backdoor. What we don't have, we cannot hand over.
What rests on trust alone
- That we store no IP addresses – if you want to be sure, use the onion address or the Mainnet Browser.
- That retention periods are kept.
- That we do not link payments to people through blockchain analysis.
- That the web chat serves honest code – safest are “mainnet chat” and the Mainnet Browser, where the chat is part of the signed software.
If servers are seized or taken over
- Seizure of the public server: no chat content (memory only), no orders, no IP addresses.
- Copy of the internal database: orders, invoices with transactions and domains, customer keys of the last 30 days, flagged customers – no chats, no private keys.
- Whoever controls a running server can record new connections from then on. Mail, website content and keys are never with us.
What you can do yourself
- Use the onion address, the Mainnet Browser or “mainnet chat” instead of the web chat in a normal browser.
- Pay from your own wallet, not directly from an exchange that requires ID; give a new address for refunds or waive them.
- Publish a domain card only if you want one – it can be switched off.
- Use separate seeds for separate parts of your life; then your domains cannot be linked even by us.
Who is responsible and your rights
The operators of cypherpunk2077.com are responsible for the data described on this page. You can reach them through the purchase chat – no account, over Tor if you like.
What is stored, why and for how long is listed above and in the data map.
- Access: which of the data listed above we hold for your domain, your key or your case.
- Erasure: whatever is no longer needed and does not have to be kept. The public registry log cannot be changed – entries there cannot be deleted for technical reasons.
- Objection: to processing you do not want; you can switch off the optional domain card at any time.
Please send requests through the purchase chat. Because we keep no names and no customer accounts, we can only match data if you give details it can be found by (such as the domain or case number) and show that it belongs to you. You can also lodge a complaint with a data protection supervisory authority.
Basis: data map, as of 27 Oct 2026, version 1 (draft) · specification part 12 §8