What the public services can see.

Website and explorer

The public website serves static pages. The explorer reads public blockchain data. Web servers may temporarily record IP address, requested route, time, response status, and browser details for reliability and abuse prevention.

Public blockchain data, including addresses, balances, mined blocks, and transactions, is designed to be visible and cannot be made private by this policy.

Desktop wallet

The wallet runs on a random local 127.0.0.1 port. New wallet files are encrypted on the device. Passwords, recovery words, private keys, and unsigned payments are not sent to Bitcoin 09 public services.

In Fast mode, the wallet gateway receives public addresses to return public chain data and receives a signed transaction when you choose to broadcast it. The official PPLNS miner sends a public payout address, an optional worker name, and proof-of-work nonces. The payout ledger stores the public address, share and target proofs, chain tip, sequence, and acceptance time. It does not store worker names or IP addresses. Ordinary web infrastructure may still process temporary connection metadata as described above. Full node mode can verify the chain without the wallet gateway.

Mobile wallet

The Android and iPhone wallet apps store protected wallet data on the device. The device key is protected by the operating system. Recovery words and private keys are not sent to Bitcoin 09 services, and the wallet data is excluded from normal cloud and device-transfer backups.

When you choose Scan QR, the app asks for camera permission and reads a recipient address on the device. Camera images are not uploaded or kept by Bitcoin 09. You can type or paste an address without granting camera access.

The mobile wallet uses the same HTTPS wallet gateway as desktop Fast mode. The gateway receives public wallet addresses when the app asks for balances or activity, and receives a signed transaction only after you review and confirm a payment. It does not receive the device key, recovery words, private keys, or wallet unlock code.

Nine Inbox

Nine Inbox encrypts notes, links, filenames, content types, and files with AES-256-GCM on your device before upload. The relay stores ciphertext plus the mailbox and item identifiers, sizes, creation and expiry times, and retention state. It can also see your IP address and request timing.

Items normally expire after seven days. Pinned text and links can remain for 30 days. Deleted or expired items are removed from the service; the v1 service does not keep content backups. The pairing link contains the keys and write credentials, so anyone who receives it may read or add items.

Discord OTC bot

The Discord OTC bot uses Discord account identifiers, display names, order details, 09C addresses, and deposit state to operate trades. Its public feed leaves out Discord identifiers, usernames, wallet addresses, deposit addresses, and payment account details.

The bot escrows only 09C. Payment between traders occurs outside the bot. Discord applies its own privacy practices to messages and account data.

Infrastructure and disclosure

Cloudflare helps deliver and protect the web services. DigitalOcean hosts project services. They may process network and request metadata under their own terms. Data may be processed outside Australia because these services operate internationally.

Information may be disclosed when required by law or when reasonably needed to protect users, the services, or the network from abuse. Bitcoin 09 does not sell personal information.

Your choices

• You can use the wallet and chain without the website, Discord bot, or Nine Inbox.
• You can delete a Nine Inbox from a paired device or let its items expire.
• Do not put private payment details, keys, seed phrases, or wallet files in public market records.

For a privacy or security concern, open a GitHub private security advisory. Include only the information needed to investigate.

Other sites

Links to GitHub, Discord, community pools, and other services lead to independent sites with their own privacy practices. This policy covers the public services operated for Bitcoin 09, including the official PPLNS endpoint, not those third-party services.