Privacy Policy

How BitBackMe collects, uses and looks after information.

Effective date: 22 September 2026

Website: https://bitbackme.com

This policy explains what information BitBackMe collects when you visit the site, create an account, publish a campaign, leave a comment, or pay the one-time review fee. It also explains what we do not collect and what we cannot control.

BitBackMe is a non-custodial, Bitcoin-only fundraising website. We publish campaign pages. We do not hold, receive, or forward Bitcoin donations. Those payments go from the donor’s wallet to the campaigner’s nominated Bitcoin wallet. Because of that, we never see a donor’s Bitcoin keys, and we do not process Bitcoin payments.

1. Who we are

BitBackMe (“we”, “us”, “our”) operates the website at https://bitbackme.com. We provide a public listing service so people can tell their story and publish a Bitcoin address where supporters can send funds directly.

We are not a bank, payment processor, charity, trustee, escrow agent, or money transmitter. We are not an intermediary between donor and campaigner. Bitcoin sent to a campaign address is a peer-to-peer transfer on the Bitcoin network. We do not control that network and we cannot reverse, freeze, or refund a Bitcoin transaction.

Privacy contact: support@bitbackme.com

You can also reach us through the website: https://bitbackme.com.

2. The short version

• Campaign pages are public. Anything you put on a campaign — name or nickname, story, photo, Bitcoin address, Mempool link, X/Twitter or Facebook link — can be seen by anyone.
• Bitcoin donations never pass through BitBackMe. We do not collect donor wallet information unless a donor chooses to contact us separately.
• The only payment we take is a small one-time review fee of $20 AUD, paid through Square, to help cover hosting and running costs and to discourage spam. That fee is not a donation-processing fee.
• We rely on voluntary donations from campaigners and supporters to keep the site running. Those gifts are optional.
• We do not sell personal information.
• We can refuse or remove campaigns that are illegal, that support illegal activity, that we consider immoral, or that go against the freedom and liberty of others.
• Bitcoin transactions are public and permanent on the blockchain. Deleting a campaign page does not erase on-chain history.

3. Information we collect

3.1 Information you give us

Depending on how you use the site, you may give us:

• Account details — email address, username, password (stored in hashed form by WordPress), and display name.
• Campaign details — campaign title, organiser name or nickname, who the campaign is for, goal amount, story, featured image, Bitcoin address, Mempool.space URL, and optional X/Twitter or Facebook URLs.
• Listing-fee details — name, email and payment information handled by Square when you pay the $20 AUD setup fee. We receive confirmation that the fee was paid. We do not store full card numbers.
• Comments — the name, email and optional website you enter on a comment form, plus the comment itself.
• Messages — anything you send us by email or through a contact form.
• Support donations to BitBackMe — if you choose to send Bitcoin or another gift to help run the site, we may see the on-chain payment and any note you attach. That is optional.

3.2 Information collected automatically

• IP address, browser type, device type and approximate location derived from IP.
• Pages visited, referring URL, date and time of visit.
• Cookies and similar files, described in section 7.
• If you comment, an anonymised hash of your email may be sent to Gravatar to check for a profile image.

3.3 Information we do not collect

Because donations are wallet-to-wallet:

• We do not collect donor Bitcoin private keys or seed phrases. Never send those to anyone.
• We do not operate a BitBackMe wallet that receives campaign funds.
• We do not receive a feed of who donated how much, unless that information is already public on the Bitcoin blockchain or a campaigner tells us.
• We do not issue tax receipts for campaign donations. Those payments are between donor and campaigner.

4. How campaign pages work (this matters for privacy)

A BitBackMe campaign is a public web page. When you submit a campaign, the details you provide are intended to be published. Treat a campaign page the same way you would treat a public blog post.

Anyone can:

• Read the story and see the image.
• See the organiser name or nickname you chose.
• Copy the Bitcoin address and look it up on Mempool.space or any block explorer.
• Follow any social links you added.

Bitcoin addresses are public identifiers. Once an address is published and used, anyone can see incoming transactions on the blockchain for as long as that chain exists. We cannot make that history private.

Do not upload images that contain hidden location data (EXIF GPS) if you do not want that location public. Visitors can download images and extract that data.

5. Why we use the information

We use personal information to:

• Create and maintain accounts.
• Publish, update, archive or remove campaign pages.
• Take the $20 AUD review fee and confirm it was paid.
• Moderate content and refuse or take down campaigns that break the law or our standards.
• Detect spam, abuse and fraud.
• Reply to you.
• Keep the site secure and working.
• Meet legal obligations if a lawful request is made.
• Understand, in a limited way, how the site is used so we can keep it running.

We do not use your information to run targeted advertising networks, and we do not sell it to data brokers.

6. Who we share information with

We share information only as needed to run the site:

If you request a password reset, your IP address may be included in the reset email.

Campaigners do not receive a private donor list from us, because we never take custody of the donation. A campaigner can only see what the Bitcoin blockchain (or a message a donor sends them elsewhere) reveals.

Square’s privacy notice: https://squareup.com/legal/privacy.

Gravatar / Automattic privacy: https://automattic.com/privacy/.

Mempool.space is an independent service. Review their terms on their site: https://mempool.space.

7. Cookies

We use cookies and similar technologies so the site can function and so we can remember limited preferences.

7.1 Cookies you may see

• A short-lived cookie on the login page to test whether your browser accepts cookies. It holds no personal data and is dropped when you close the browser.
• Login cookies (usually about two days) and screen-option cookies (usually about a year) if you sign in. If you choose “Remember me”, the login may last about two weeks. Logging out removes the login cookies.
• A one-day cookie if you edit or publish a post. It stores the post ID only.
• Comment cookies, if you opt in when commenting: name, email and website, kept for about one year so you do not have to type them again.
• A cookie-consent cookie so we can remember whether you accepted or limited cookies.

7.2 Your choices

You can refuse non-essential cookies through the cookie settings on the site and through your browser. If you block all cookies, some features (especially logging in) may not work.

8. Embedded and linked content

Campaign pages and articles may include or link to content from other sites — for example Mempool.space, X/Twitter, Facebook, images or videos. That third-party content behaves as if you visited the other site. Those sites may collect data, set cookies, and track you under their own policies. We do not control them.

9. How long we keep information

• Campaign pages stay public until the campaign is closed, archived or removed. We may keep a copy for moderation, security or legal reasons.
• Comments and comment metadata are usually kept indefinitely so repeat comments can be recognised and spam can be managed.
• Account profile information is kept while the account exists. You can edit most of it. Usernames generally cannot be changed.
• Listing-fee records are kept as long as needed for accounting, dispute handling and legal record-keeping.
• Server logs are kept for a limited operational period unless we need them longer for security.

When information is no longer needed, we delete it or irreversibly anonymise it where we reasonably can. Blockchain records are outside our control and cannot be deleted by us.

10. Security

We use HTTPS and the ordinary protections that come with a maintained WordPress site (hashed passwords, access controls, updates). No website is perfectly secure. Do not put secrets on a campaign page. Double-check any Bitcoin address before you publish it and before you send funds. Bitcoin payments cannot be reversed.

11. Your rights

Subject to Australian privacy law and any other law that applies to you, you may ask us to:

• Tell you what personal information we hold about you.
• Give you a copy of it.
• Correct information that is wrong.
• Delete personal information we hold, unless we must keep it for administration, security or the law.
• Limit how we contact you.

How to ask: email support@bitbackme.com and tell us what you want done. We may need to verify that the request comes from you.

What we cannot do:

• Erase a Bitcoin transaction.
• Un-publish an address that others have already copied or archived.
• Make a third-party site (Mempool, Square, X, Facebook, Gravatar) delete data they hold.
• Change a WordPress username in the ordinary course.

If you have an account, you can also review and edit most profile fields yourself while logged in.

If you are in the EU/UK or another region with extra rights (access, erasure, restriction, portability, objection, complaint to a regulator), contact us and we will handle the request as the law requires.

In Australia you may complain to us first. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

12. Children

BitBackMe is intended for adults. You should be 18 or older to create an account, publish a campaign or pay the review fee. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it where we can.

13. International visitors

The site is run from Australia and may be hosted on servers in Australia or other countries. If you use BitBackMe from outside Australia, your information may be processed in Australia and in any country where our host or service providers operate. Those places may have different privacy laws from your own.

14. We do not sell your information

We do not sell, rent or trade personal information. We do not share it for targeted advertising networks.

15. Other people’s content

Campaigners are responsible for the personal information they publish about themselves and about anyone they name. If you are mentioned on a campaign and want that material changed or removed, contact the campaigner first. You can also contact us. We will look at the request and may edit or remove content, especially where the law requires it or where the campaign breaches our standards.

16. Changes to this policy

We may update this policy from time to time. The current version will always be posted on this page with a revised effective date. If we make a material change, we will note it on the site.

17. Related pages

This policy should be read with our Terms of Use and FAQ. Campaign rules sit in the FAQ and in section 10 of the Terms. Using BitBackMe means you also accept those rules.

18. Contact

Questions about privacy, access or deletion:

support@bitbackme.com

Website: https://bitbackme.com

This page is a practical privacy notice for a small, non-custodial website. It is not legal advice. Have it reviewed if you need formal advice for your situation.