Privacy
What's
kept
PotPool runs a mining pool and pays out lottery winnings. That takes a little personal data. This page lists all of it. Last updated 7 September 2026.
Who is responsible
The operator
PotPool is operated from Denmark by a single person. Reach them directly on Telegram (@Mobilpadde), Bluesky or X, or ask in the Telegram community.
What's collected
Only what mining needs
Stratum connections: the Base address and rig name in your worker string, and every share your hardware submits.
Website: your wallet address when you connect one and open your stats. Nothing else: no cookies, no analytics, no tracking pixels, no third-party scripts or fonts.
IP addresses are used to hold the connection open and are not written to logs or storage.
Why, and on what basis
To run the pool and pay you
Shares are counted per address to compute your stake in a round and to publish the Merkle root the escrow contract pays claims against. The legal basis is performance of the mining agreement you enter by pointing a miner at the pool (GDPR art. 6(1)(b)) and a legitimate interest in operating a secure service (art. 6(1)(f)).
How long
Short, except what pays you
Raw shares are deleted when a round ends. Per-address totals and last-seen timestamps expire seven days later. Round results, meaning the addresses, share weights and winnings of each settled round, are kept indefinitely because claims depend on them and the Merkle root is already public on Base.
Who sees it
Nobody, except the chain
No data is sold. Winner addresses and amounts become public on the Base blockchain when a round settles, which is inherent to how claims work. When a block is found, the finder's shortened Base address is posted to the public Telegram group. If you connect with Coinbase Wallet, Coinbase sees that connection under its own privacy policy. Servers are hosted by MC-Node in the Netherlands.
Your rights
Ask, it's handled
You can ask what's held about an address, have it corrected, or have it erased where it is not needed for pending claims. You can also object to processing or complain to Datatilsynet, the Danish supervisory authority. The Global Privacy Control signal is honoured, though there is nothing to opt out of. Preferences you type on How it works stay in your own browser's local storage and never leave it.