Privacy Policy

Last updated: August 13, 2026

BTC GACHA is built to work without knowing who you are. There is no registration, no account, and no profile. This policy explains the small amount of technical data the service does process, why it is needed, and how long it is kept.

What we never ask for

• Name or username
• Email address or phone number
• Date of birth, nationality, or address
• Government identification of any kind
• Wallet connection or deposit before playing

What we process

Anonymous session

When you first visit, a random identifier is stored in a cookie on your device. It links your draws, rewards balance, and monster collection together. It contains no personal information and cannot be tied back to you by us. Clearing the cookie permanently disconnects you from that session and its balance.

Abuse prevention

To keep the reward pool fair, the service derives a one-way hashed identifier from your network address. The hash key rotates daily, the raw network address is not stored on your profile, and the derived abuse signals expire automatically after 48 hours. These signals are used only to rate-limit claims and detect automated farming.

Redemptions and donations

When you redeem rewards, the Lightning address or invoice you submit is stored with the payout record and passed to Lightning payment infrastructure in order to deliver your sats. Submit a destination that you are comfortable associating with this service. Donation invoices are generated on demand and require no information from you.

Analytics

The site uses Google Analytics to understand aggregate usage (pages visited, approximate region, device type). Google processes this data under its own privacy policy. We do not send Google any identifier that links analytics data to your session, balance, or redemptions.

Advertising

The service is funded by advertising. Ads are currently served through a privacy-focused network that does not use tracking cookies; ad networks may still process your network address and browser information under their own privacy terms in order to serve and count ads. We record pseudonymous ad events (requests, fills, views, errors) to measure performance. Ads never influence draw outcomes, and clicking an ad never changes a reward.

What we do not do

• We do not sell or rent any data.
• We do not build advertising profiles of players.
• We do not custody user deposits or hold private keys for you.
• We do not link your session to your identity, and we have no means to do so.

Retention

Abuse signals expire after 48 hours. Operational records (draws, rewards, payouts, ad events) are retained pseudonymously for as long as needed to run the service, settle advertising revenue, and prevent fraud.

Your choices

• You can clear the session cookie at any time; this abandons the session and any unredeemed balance.
• You can block analytics scripts without affecting gameplay.
• You can use a fresh Lightning invoice per redemption instead of a reusable Lightning address if you prefer not to reuse a destination.

Changes

This policy may be updated as the service evolves. The latest version is always available on this page, with the date above reflecting the most recent change.