Legal
Privacy Policy
Effective 24 July 2026 · applies to the Pasiv desktop app and pasiv.network
The short version.
- Pasiv works without an account. Mining runs on your machine, and pools pay your address directly.
- Your payout address is never sent to our servers. It goes only to the mining pool you chose.
- We never ask for private keys or seed phrases, and the app has no way to spend from your wallet.
- Analytics are anonymous, minimal, and can be switched off in the app's settings.
- We don't sell data, show ads, or track you across the web.
1. Who we are
Pasiv ("we", "us") makes the Pasiv desktop mining app and operates the website pasiv.network. For anything in this policy, contact support@pasiv.network.
2. What the desktop app processes
Stored on your device only
Your configuration — payout addresses, chosen coin, Auto mode and other toggles — and the local fee ledger are stored on your machine. They are not uploaded to us.
Mining pools (when you press start)
Mining means your machine connects directly to the pool configured for your coin (currently MoneroOcean for Monero and HeroMiners for Zephyr and Salvium). The pool necessarily sees your IP address, payout address, and mining activity (shares, hashrate, worker name). Pools are independent services under their own privacy terms; Pasiv is not in that path and does not receive this data.
Auto / Max-Profit mode (opt-in)
If you enable Auto mode, the app periodically fetches public market data — coin prices from CoinGecko and pool statistics from HeroMiners — to rank coin profitability. These are ordinary web requests: the services see your IP address and an app identifier in the request, nothing about your wallet.
Software updates
The app checks a signed release manifest on our release CDN (hosted on Supabase Storage) to offer updates. The host sees standard request metadata (IP address, user agent). Updates are cryptographically signed and verified on your device before install.
Optional wallet sign-in
You can optionally sign in with a wallet (e.g. MetaMask or Phantom) using a signed message. If you do, your public wallet address is stored with our authentication provider (Supabase) as your account identifier. Signing in never exposes private keys, and Pasiv cannot move funds. Email support@pasiv.network to delete this record.
Analytics (anonymous, optional)
The app sends a small set of anonymous product events to PostHog (US cloud) so we can tell whether features work:
- Events: app opened, mining started/stopped, coin switched, Auto mode toggled, payout address saved (the coin name only — never the address).
- No autocapture, no session recording, no screen contents, and "Do Not Track" is respected.
- Events are anonymous — we do not build identified profiles.
- You can turn analytics off entirely in Settings.
3. What the website processes
pasiv.network is a static site. It uses PostHog for anonymous page-view and click analytics (e.g. which download button was pressed), loads fonts from Google Fonts (Google sees your IP when serving them), and serves downloads from our release CDN. The site sets no advertising cookies.
4. What we never collect
- Private keys or seed phrases — never asked for, never stored, no UI exists for them.
- Payout addresses on our servers — they live on your device and at your chosen pool.
- Files, documents, clipboard, camera, microphone, or anything else on your machine unrelated to mining.
- Browsing history or cross-site tracking of any kind.
5. Service providers
| Provider | Purpose | What they see |
|---|---|---|
| PostHog (US) | Anonymous product & site analytics | Anonymous events, IP for ingestion |
| Supabase | Optional wallet sign-in; release hosting | Public wallet address (if you sign in); download request metadata |
| Vercel | Website hosting | Standard web server logs |
| Google Fonts | Web fonts on the site | IP address when fonts load |
| Mining pools | The mining itself (your choice of pool) | IP, payout address, shares/hashrate |
We share data with no one else, and we never sell it.
6. Retention and your rights
Analytics events are anonymous and kept only as aggregate product statistics. The only personal record we can hold is the public wallet address of an optional sign-in — email us and we will delete it. Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California) you may have rights of access, correction, deletion, and objection; we honour requests to support@pasiv.network regardless of jurisdiction. Uninstalling the app removes its local data.
7. Children
Pasiv involves cryptocurrency and is not intended for anyone under 18. We do not knowingly process children's data.
8. Changes
If this policy changes materially, we'll update this page and note it in the app's release notes. The effective date above always reflects the current version.