Effective 7 October 2026. Additions in sections 3, 8, and 9 about model providers, transfers, and European rights take effect on 21 October 2026. This policy covers POD Miner: the website at pod-miner.com and the API at api.pod-miner.com (the "Service"). The Service needs no name, email, or password. It runs on a wallet address and an API key. "Personal data" means information that relates to an identifiable person, including a wallet address. FRSR is the data controller. Contact: @pod_miner on X.
| Data | What it includes | Why we need it |
|---|---|---|
| Wallet and deposits | Funding wallet address, transaction signatures, amounts | Crediting your balance, fraud prevention, sanctions compliance |
| Wallet lookups | Requests your wallet makes to Solana through our API when you buy credits | Completing the purchase |
| API key records | Key identifier, linked wallet, creation time | Authenticating requests |
| Session cookie | An HttpOnly cookie named podminer_session, lasting about seven days | Keeping you signed in on the site |
| Agent ID | The agent identifier sent with free-tier requests | Applying free-tier limits |
| Usage records | Model, time, token counts, amount charged | Billing, rebates, and abuse prevention |
| Rebate records | Wallet, amount, and time of each rebate | Paying and accounting for rebates |
| Host records | Model, machine size, start and stop times, status, charges | Billing and support |
| Technical logs | IP address, browser and device type, request time, request URL, error codes | Security, rate limits, debugging |
| Messages to us | Whatever you send when you write, which may include a social account | Answering you |
There are two exceptions for prompt text.
We do not send marketing email, and we do not share personal data with anyone for their own marketing. We do not track you across other sites, so a Do Not Track signal changes nothing.
The account page stores a revealed API key in this browser's localStorage so it can show the key again. That copy stays on your device until you clear the site's data. Closing the tab does not remove it. The model id last chosen on the account page, and the country choice for a dedicated host, are kept in sessionStorage and are cleared when the tab closes.
Signing in sets the podminer_session cookie described above. It only keeps the session. It is not used for advertising.
We do not keep your prompts, but other parties process them to produce an answer.
Some catalogue models, and the free tier, run on machines we rent in the same way as dedicated hosts. On these, the machine also serves other users of that model.
Do not send sensitive personal data, secrets, or regulated data to a dedicated host.
Model files are downloaded from Hugging Face straight to the machine. Hugging Face sees the machine's request and learns nothing about you.
Deposits are made on Solana, which is public and permanent. Anyone can see that your wallet paid ours. We cannot edit or delete on-chain records.
Rebates are paid on-chain to the wallet that spent. Anyone can see those payments, which shows that your wallet used the Service and roughly how much it spent. Our website also publishes operating figures for the Service, such as hosts running and rebates paid.
We use the data in section 1 for three purposes.
We also use these records to enforce our Terms, to bring or defend legal claims, and to protect the rights and safety of users, the public, and ourselves. We use aggregated statistics that identify no one to improve the Service and to publish figures about it.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data only on one of these bases:
We do not send marketing, and we do not rely on consent to run the Service.
| Recipient | What they receive | Where |
|---|---|---|
| Vercel (website hosting and inference gateway) | IP address, request details, and prompt content for metered inference | United States |
| Model providers behind the gateway | Prompt content for metered inference | United States and other countries |
| Vast.ai and its independent GPU hosts | Prompts and outputs on dedicated hosts, the free tier, and models we host. They do not receive your wallet address or API key. | Vast.ai: United States. A dedicated host is in the country on your quote. The free tier and shared models can be in any country. |
| ClawPump (the agent platform that pays rebates) | Wallet addresses and rebate amounts | ClawPump's own systems |
| Hostinger (API and ledger server) | The records in section 1 | Germany |
| The Solana RPC used to check payments | Wallet addresses and the transactions we look up | Whatever region that endpoint uses. The software default is the public Solana mainnet API. |
| Authorities | Records we are legally required to hand over | As required |
If the Service is sold, merged, or wound up, records pass to the new operator under this policy.
Each provider gets only what it needs to do its job. We may also disclose records to investigate fraud or a security incident, to protect someone's safety, or with your consent.
Our site links to other services, such as wallet apps, ClawPump, GitHub, and Hugging Face. Their own privacy policies apply once you leave our site.
| Data | Kept for |
|---|---|
| Usage, billing, and host records | 12 months, or longer where tax or sanctions law requires |
| Technical logs | 30 days |
| Messages to us | 12 months |
| Prompts and outputs | Not stored, apart from the exceptions in section 2 |
| On-chain transactions | Permanent, outside our control |
If you ask us to delete your records, we do so within 90 days. The exceptions are records the law requires us to keep and copies in routine backups, which expire on their own schedule.
Data is processed in the countries where we and the providers in section 6 operate, including the United States and Germany. For a dedicated host, you choose the country. The quote shows that country before you confirm, and confirming instructs us to process your prompts there. If you do not choose, the host is in the United States. Choosing any country means the host can be wherever the provider lists a machine. The free tier and the models we host for everyone are not part of this choice. Those machines can be in any country.
Vast.ai publishes its own terms for data on an instance. Individual GPU hosts are independent of Vast.ai. Vast.ai says datacenters in its Secure Cloud tier sign data processing agreements with it. We do not rely on that for other hosts.
The website and the inference gateway run in the United States. The API ledger runs in Germany. A dedicated host runs in the country on your quote. If you are in Europe, your personal data can be processed outside your country. A provider's own terms are the safeguard it offers. We do not add a transfer contract of our own on top of that.
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict its use, or move it, and you can object to how we use it. If you are in Europe, that copy can be in a machine-readable form, and you can complain to a regulator in your country of residence, your place of work, or the place of an incident. We would rather hear from you first.
The Service does not depend on consent, so there is nothing to withdraw before you can stop using it. Stopping does not undo processing that the contract or the law already required. We may keep data in backups, to prevent fraud and abuse, or where the law requires it.
We know you only by wallet and key, so we will ask you to prove control by signing a message with the funding wallet. Write to @pod_miner on X and we will reply within 30 days.
We may refuse or charge for requests that are clearly unfounded or excessive, as the law allows.
We encrypt data in transit, restrict access to our systems, and limit each dedicated host to its owner's key. No system is perfectly secure, and keeping your API key safe is your responsibility.
If a security incident affects your data, we will post a notice on the site and contact you directly where we have a way to reach you.
The Service is not for anyone under 18, and we do not knowingly collect their data. If we learn that we hold a minor's data, we delete it.
We post changes to this policy here with a new effective date. Material changes take effect 14 days after posting. The companion document is the Terms of Service.