Privacy Policy

Overview

BitLens is a privacy-first Bitcoin platform combining a strategic Command Center with education modules, research tools, and live data dashboards. The public experience has no user accounts, advertising, behavioral analytics, or tracking cookies.

Data we do not collect

• No analytics or tracking scripts (no Google Analytics, no Mixpanel, no Plausible, nothing)
• No advertising or analytics cookies for public visitors
• No public user accounts, profiles, or login
• No names, email addresses, portfolio balances, or cross-site identifiers
• No advertising, ad tracking, or monetization of user behavior
• No browser fingerprinting, cross-site tracking, or advertising identifiers

Local storage

BitLens stores your preferences in your browser's localStorage to provide a better experience. This data never leaves your device. It includes:

• Theme preferences — color theme (Gold, Orange, Terminal, Purple) and mode (Dark, Light, OLED)
• Language preference — English or Dutch
• Calculator settings — currency, scenario, DCA amount, frequency, and time horizon
• Learning progress — which educational modules you have completed
• Quiz scores — your best scores per quiz category
• Onboarding state — whether you have seen the welcome guide and guided tour
• UI preferences — dismissed banners, alert tooltip state, tab preferences
• Cached API data — temporarily cached market data and on-chain metrics to reduce network requests

You can clear this data at any time through your browser settings. Preferences and cached market data remain on-device. If you explicitly create a custom alert or enable push notifications, an anonymous random device ID and the required rule or push subscription are sent to the server so that feature can work.

Command Center — server-side processing

The Command Center uses Cloudflare Workers for public market-data processing and, when you explicitly enable them, anonymous device-scoped alerts and push notifications:

• Market data aggregation — The Worker fetches live prices, on-chain metrics, and macro indicators from public APIs (see External Services below). This data is cached and served to all visitors identically.
• Curated news — News summaries and Bitcoin impact analysis are generated from public market context (current prices, framework states) and written to D1. No user data is used.
• Self-interpretation engine — The Worker computes anomaly detection, historical pattern matching, causality chains, and predictive signals based on public market data. These computations are deterministic and identical for all visitors.
• Self-learning system — Signal accuracy is tracked over time by comparing predictions against actual market outcomes. This is aggregate system performance data, not user-specific data.
• Event result tracking — After macro events (FOMC, CPI, etc.), verified public outcomes can be stored for historical reference.
• Push notifications — If you enable browser notifications, the server stores the browser push endpoint and encryption keys required to deliver notifications. These records are not linked to a name, email address, or account and are removed when you unsubscribe.
• Abuse prevention — Public alert and push writes use keyed pseudonymous abuse-prevention identifiers derived with a server secret. Raw network addresses are not stored. Admission records are feature-scoped, cannot be linked across alert and push features, and records older than 24 hours are deleted during the next public write.

Editorial and analytical content is the same for every visitor. The only device-scoped server records are anonymous custom-alert rules and opt-in push subscriptions needed to provide those features.

Cloudflare infrastructure

BitLens runs entirely on Cloudflare's edge network:

• Cloudflare Workers (Paid plan) — Serves API endpoints, runs scheduled market and editorial jobs, and processes opt-in custom-alert and push-subscription requests.
• D1 database — Stores shared editorial and analytical content. It also stores anonymous device-scoped custom-alert rules and opt-in push-subscription records, including the push endpoint, encryption keys, limited browser information, and a random device ID required to provide those features.
• KV (Key-Value store) — Caches public market bundles and sparklines, plus short-lived operational data such as rate-limit counters, health state, response caches, and authentication-throttling counters.
• Cloudflare Pages — Hosts static files (HTML, CSS, JavaScript). Cloudflare may process standard HTTP headers such as IP address and browser headers as part of its CDN service — see Cloudflare's Privacy Policy.

BitLens does not add behavioral analytics, advertising tracking, or cross-site profiling. Operational security, health, and rate-limit records are used only to run and protect the service.

External services

BitLens connects to third-party services for public data. Some connections are made from your browser, others from the Cloudflare Worker:

From your browser:

• Google Fonts — Loads Inter and JetBrains Mono typefaces. Google may receive your IP address — see Google Fonts Privacy.
• TradingView — Embeds real-time market charts. Subject to TradingView's Privacy Policy.
• Mempool.space — Block height and transaction fee data
• CoinGecko / Coinbase / CoinPaprika / CoinCap — Live BTC price feeds
• Alternative.me — Fear & Greed Index
• Bitnodes — Global Bitcoin node network data

From the Cloudflare Worker (server-side, not your browser):

• External analysis jobs — News, analyst, event, and briefing synthesis are generated outside the public request path and written to D1. Public responses do not expose internal model, token, or cost metadata.
• FRED (Federal Reserve) — M2, CPI, Fed Funds Rate, DXY, national debt, credit spreads, real yields, TGA balance, reverse repo, and global M2 components
• Yahoo Finance — VIX, crude oil, S&P 500, Nasdaq, gold, silver, natural gas (proxied through Worker)
• BGeometrics — On-chain metrics: MVRV Z-Score, SOPR, NUPL, Exchange Netflow, Realized Price, Puell Multiple

None of these services receive any user-specific data from BitLens. All requests contain only public market queries.

Your calculations stay private

All portfolio calculations, DCA projections, scenario modelling, address validation, transaction decoding, and fee estimation happen entirely in your browser. Your Bitcoin holdings, investment amounts, and financial plans are never transmitted to any server.

Custom alerts

You can set custom price alerts in the Command Center. Alert rules are stored with an anonymous random device ID so one browser cannot manage another browser's rules. They are not linked to a name, email address, or user account. Dismissing a global editorial alert is stored only on your device.

Progressive Web App

BitLens can be installed as a Progressive Web App (PWA). The Service Worker caches application files on your device for offline access and faster loading. The cache contains only app assets, theme files, and previously fetched public market data — no personal information.

Cache is versioned and automatically refreshed when BitLens is updated.

Open source

BitLens is built in the open. You can inspect the source code to verify these privacy boundaries. There are no hidden analytics or obfuscated tracking; server-side device records exist only for explicitly enabled custom-alert and push-notification features.

Changes to this policy

If this policy is updated, the changes will be reflected on this page with an updated date. Because BitLens does not collect contact information, we cannot notify you directly — check back periodically or follow @th0m45k on X for updates.

Contact

If you have questions about this privacy policy, reach out at hello@bitlens.app.