Privacy policy

This policy covers the Hopbits website, Hopbits operator and business accounts, and the Linux / Docker measurement node client.

Before onboarding a node, we document what it measures, what it sends, and which permissions it needs.

When you create an account or use Hopbits we store:

• Your email address and Argon2id password hash (or linked Google / GitHub OAuth account identifier).
• Your selected account interests (running nodes, business monitoring, or both).
• For node operators: paired node public keys, node labels, enrolment token metadata, coarse network/country classification, and measurement task results.
• For business users: configured check targets, webhook endpoints, API key hashes, and measurement results.

We do not ask for a crypto wallet address, and our node client never captures browsing history or acts as a general-purpose proxy.

To operate your Hopbits account, authenticate sessions and API keys, send transactional security emails (such as password resets), route signed measurement tasks to paired nodes, and calculate operator contribution points and business monitoring results.

We do not sell personal details or share account emails for third-party advertising.

We use Google Analytics to understand aggregate site visits and page performance, without selling personal details or sharing account emails for advertising. When you sign in to manage nodes or business monitors, Hopbits sets a strictly necessary session cookie (and short-lived OAuth state cookies during Google or GitHub sign-in). Fonts and map data are served directly from Hopbits.

Like any online service, the servers that deliver these pages and node connections receive IP addresses and basic connection metadata in order to answer requests and prevent abuse. Cloudflare carries public web traffic between you and the site and may keep short-lived technical security logs. Raw node IP observations are encrypted at rest and scrubbed on a bounded retention schedule.

Account and measurement records are stored in Hopbits databases operated on dedicated European infrastructure. Only authorized Hopbits operators can access production infrastructure.

Account details are kept while your account remains active or until you ask us to delete your account, subject to bounded security and ledger audit retention.

You can unbind nodes or revoke API keys and enrolment tokens directly in your dashboard at any time. To request a copy, correction, or deletion of your account data, or to opt a domain or IP range out of probing, write to [email protected] and we will reply within 30 days.

Depending on where you live, you may also have the right to complain to your data protection authority.

Hopbits accounts are meant for people aged 18 or over. If you believe a child has registered an account, tell us and we will remove it.

If this policy changes we will update this page and the date beside it. If a material change affects how we handle account data, we will notify registered users beforehand.

Questions about this policy or your details: [email protected]. The rules for using Hopbits are in the terms of use.