DEGet CorePass →

Legal

Privacy policy

No cookies, no advertising trackers, no embedded videos. Fonts and live network data load from other servers. What this website processes, and why, is listed below.

As of October 2026

Who is responsible

Tell Me More About Core GbRc/o Block ServicesStuttgarter Str. 10670736 FellbachGermany

Email: contact@tellmemoreaboutcore.com

We have not appointed a data protection officer; we are not required to.

Hosting and server logs

This website runs on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located in Hetzner's data centre in Nuremberg, Germany. We have a data processing agreement with Hetzner under Art. 28 GDPR.

When you open a page, your browser sends technical data that the web server records in a log file:

  • IP address
  • date and time of the request
  • the page or file requested, status code and amount of data
  • the page you came from (referrer)
  • browser and operating system (user agent)

We use this data to deliver the website, keep it secure and find errors. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a working, secure website. The log files are deleted automatically after 14 days.

Visitor statistics (Umami)

We count visits with Umami. Umami runs on our own server; no data goes to a third party.

Umami stores the page visited, the page you came from, browser, operating system, device type, an approximate location (country, region, city) and clicks on marked links and buttons. Screen size and language are removed in your browser before anything is sent. It sets no cookies and does not store your IP address. It uses the IP address only briefly, to work out the approximate location and, together with browser data, to form a pseudonymous visit ID that changes every month, so you cannot be recognised across months.

Short links such as /ig, /x or /go/… record which channel a visit came from (UTM tags).

Purpose: to understand which content is read and to improve the website. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a simple visit count without cookies and without third parties.

In your browser the Umami script only checks whether you have turned measurement off (see below) and stores nothing on your device.

Storage period: 24 months. Older data is deleted automatically every day.

You can object at any time by turning measurement off here:

 

This stores one entry in this browser (umami.disabled), only because you ask for it (§ 25(2) no. 2 TDDDG). Clearing your browser data turns measurement back on.

Fonts (Adobe Fonts)

We use fonts from Adobe Fonts. When a page loads, your browser connects to Adobe's servers (use.typekit.net, p.typekit.net). Adobe receives your IP address and the name of this website. According to Adobe, the IP address is used to deliver the fonts and is not stored, and no cookies are set.

Provider: Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. Data may be transferred to Adobe Inc. in the USA. Adobe Inc. is certified under the EU-US Data Privacy Framework.

Purpose: a consistent typeface; the font is part of our brand. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest being a consistent appearance. The connection to Adobe happens on every page load. For transfers to the USA, the adequacy decision for the EU-US Data Privacy Framework applies (Art. 45 GDPR).

More: Adobe Fonts privacy.

Live block height

The website shows the current block of the Core blockchain. For this your browser connects directly to public Core nodes (xcbapi.coreblockchain.net, xcbws.coreblockchain.net) and to the statistics of the mining pool CatchThatRabbit (de-api.catchthatrabbit.com). The operators of these services see your IP address and browser data. We have no access to that data. Both services are run within the Core ecosystem and delivered through Cloudflare, Inc. (USA), so data may be processed in the USA.

Purpose: showing live network data. Legal basis: Art. 6(1)(f) GDPR.

Storage in your browser

To return you to the same place when you go back, the website keeps your scroll position and the archive search or filter in your browser's session storage (key tmmac:entry:…). For this it also gives the page in your history a random key. The entry stays in this tab, is deleted when you close the tab, and is never sent to us. Legal basis: § 25(2) no. 2 TDDDG.

Contact by email or form

If you write to us, we process your message and your contact details to answer you. Legal basis: Art. 6(1)(b) GDPR if your message concerns a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your request is settled, unless statutory retention periods apply.

The contact form in the legal notice asks for your name, email address and message. Our server turns them into an email to our contact address and stores nothing itself. To protect against spam it keeps your IP address in memory for at most 15 minutes after your last request to limit the number of messages; it is not written to disk. We delete the email, like any other email, once your request is settled.

Our email is hosted by IONOS SE, Montabaur, Germany. We have a data processing agreement with IONOS under Art. 28 GDPR.

Our apps: CorePulse and CoreStarter

This section covers the apps CorePulse (Android) and CoreStarter (Windows, Linux, macOS). Neither app has an account, advertising or tracking, and neither sends us any data. Your settings (Core address, device name, power level) are stored only on your device. Scanning a QR code uses the camera; the image is processed only on the phone and not saved.

Downloads: the app files are stored on GitHub (GitHub, Inc., USA). When you download one, your browser connects to GitHub, which receives your IP address and browser data. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest being a reliable and verifiable download. GitHub, Inc. is certified under the EU-US Data Privacy Framework; for transfers to the USA the adequacy decision applies (Art. 45 GDPR).

Mining (CorePulse; CoreStarter only if you switch mining on): the app connects to the mining pool Catch That Rabbit (catchthatrabbit.com). The pool receives your Core address, the device name you choose, your computing power and your IP address, and processes them under its own responsibility. For the support share of 0.42 % the app mines part of the time for TMMAC's address; legal basis: Art. 6(1)(f) GDPR, our legitimate interest being to fund the development of the app.

Node (CoreStarter): the Core node talks to other nodes of the Core network (peer to peer). They see your IP address. The node may open a port on your router (UPnP) and asks a public time server if your clock is off.

CoreStarter itself opens no connection: no update check, no telemetry. Windows with its WebView2 runtime and macOS may contact Microsoft or Apple on their own. CorePulse does not look for updates either.

Donations

We show a donation address on the Core blockchain. If you donate, the transaction is recorded publicly and permanently on the blockchain and visible to anyone. We cannot change or delete it. We do not combine it with other data.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Email us to exercise them.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. We then stop processing unless we can demonstrate compelling legitimate grounds. An email is enough; for visitor statistics you can also switch measurement off directly in the section above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work (Art. 77 GDPR).

You are not obliged to provide any data. We do not use automated decision-making.