DRAFT for review · Last updated: August 20, 2026 · Operator details to be completed before launch.
The short version: we designed Guava so there is almost nothing to collect.
No account, no personal data. Bitcoin Guava requires no registration. We do not ask for your name, email, wallet, or identity. Calculator inputs and your preferences (theme, streak, push hour) are stored locally in your browser (localStorage) and never leave your device.
Push notifications. If you enable the morning push, your browser generates an anonymous push subscription (an endpoint URL and cryptographic keys) which we store together with your chosen hour, solely to deliver the daily notification. It contains no personal information. Disable the push at any time in Settings; the subscription is then deleted.
Weekly newsletter (optional). If you subscribe to the Weekly Guava email, we store: your email address, the exact consent text you accepted, the timestamp, your signup source, browser language and country (derived once from your IP, which is not stored). Purpose: sending the weekly email and describing our audience to sponsors only in aggregate, anonymous form (e.g. "38% of readers are in Italy"). We never sell, rent or share your email or any individual personal data with anyone. Every email contains a one-click unsubscribe; unsubscribing stops all sending and flags your record for deletion.
First-party statistics. We measure visits ourselves, without cookies and without storing IP addresses: each visit is counted under a pseudonymous identifier that changes every day and cannot be traced back to you. Country is derived from the IP at the moment of the visit and only the country code is kept.
Server logs. Our server keeps standard, short-lived technical logs (IP address, user agent, requested URL) for security and abuse prevention, automatically rotated. We do not build advertising profiles and we never run advertising pixels.
Google Analytics — only if you allow it. We use Google Analytics 4 (measurement ID G-RZM51QYEMC) to understand which parts of the site people actually find useful. It is active by default and you can switch it off at any time from Settings → Analytics inside the app; the choice is remembered in your browser and no analytics cookie is set once you turn it off.
When you do allow it, Google receives your truncated IP address, the pages you view, approximate location (country/city level), device and browser type, and a randomly generated identifier stored in a cookie. Google acts as our data processor and may store this data on servers outside the EU under its standard contractual clauses; we keep the retention period at the shortest option Google offers. We do not upload your email address or any other personal identifier to Google, and we never use the data for advertising — ad storage and personalization are permanently disabled on our property. Google's own explanation is at policies.google.com.
Our own counter. Independently of Google, we measure the site ourselves, on our own servers, in two layers.
The first is a random visitor id stored in your browser's local storage under guava.vid. It is a string of random characters generated on your device: it holds no name, no email and no IP, it is never shared with anyone, and it exists so that one person counts as one person instead of as a new stranger every morning. Clearing your browser's site data deletes it and a new one is generated on your next visit. If your browser blocks storage, nothing is stored and nothing breaks.
The second is a cookie-free tally of page views, kept server-side. It identifies a request with a hash of IP + browser + a rotating secret, which cannot be reversed and rotates daily, weekly and monthly. Its only purpose is to keep the view count correct when the first layer is unavailable.
Alongside these we record which actions happen on the site — a prediction placed, a calculator opened, an email signup — and how long a page stayed in front of you. Never what you typed, never your stack, never your diary: those are read and written only by your own browser and are never transmitted to us at all.
Third-party data sources. Market data shown in the app is fetched by OUR server from public APIs (exchange market data, mempool.space, alternative.me). Your browser talks only to bitcoinguava.com — third parties never see your requests.
Legal basis & contact. Processing described above rests on legitimate interest (operating and securing the service). Operator: [LEGAL NAME / ADDRESS — to complete]. Contact: [EMAIL — to complete]. You may request information or deletion of push subscriptions at any time.