Privacy / Updated October 28, 2026

Understand what
leaves your device.

Website and support

This supplied website uses no advertising trackers, analytics, third-party fonts or cookies. Ordinary server logs may contain IP addresses, timestamps and requested pages. Downloads are requested from this server or, when labeled, Goldshell’s GitHub.

The support form sends your name, reply email, topic, optional version and message to support@acmecrypto.io through ACMECrypto’s mail provider. A temporary in-memory IP counter limits submissions. Support messages are not stored in a website database; they remain in the support mailbox for follow-up. Email providers may retain correspondence under their policies.

Product update subscriptions

We store your email address, selected product, confirmation status and consent timestamp in a protected database outside the public website. A confirmation email verifies ownership before any product updates are sent. Confirmation links expire after 48 hours. Each product subscription is separate. Every product-update email includes a link to unsubscribe; completing it deletes that product subscription. Your email is used for the updates you requested and is handled by our mail provider for delivery.

ACMECrypto Miner OS / XBT-Box

The Windows installer connects to your miner over SSH. The installer saves the SSH password encrypted with Windows DPAPI for the current Windows account. Trusted SSH host keys are also kept locally in Windows application data. Optional discovery scans your selected local network; Find Goldshell opens Goldshell’s website.

The on-device console stores the settings needed to operate your miner, including pool credentials, tuning and network settings. Mining connects to the selected pools, and the disclosed 2% developer fee uses mining connections. These pool services see the normal connection and worker information needed to credit shares.

Diagnostics and logs contain device information. Exports attempt to remove recognized credential-bearing lines, but inspect every export before sharing. Keep the console and SSH on a trusted LAN.

The service records address-bound entitlements and purchase/refund status, with purchase tokens encrypted at rest. Initial online checks last seven days per purchase. Eligible permanent certificates then allow offline access for that address. Purchase and entitlement records may be retained to support restoration and refund handling. Public checkout remains disabled in the current preview; any enabled release must use matching disclosures.

Questions and deletion requests

Independent software