Guide | Community | 8 min read

Privacy at a bitcoin online store: Here’s how BitcoinStuffStore handles it

March 2026By Mario

Home / Community

Hi bitcoiner,

Privacy isn’t an afterthought at bitcoin, it’s in our DNA. Yet most online stores leave you in the dark about what happens to your data. Just how sensitive this issue is became clear during a major data breach in 2020: a well-known hardware wallet provider had a leak of customer data (names, addresses, and email addresses), not the wallets themselves. Years later, those customers are still being targeted with phishing and extortion attempts. That’s why I’m explaining exactly what privacy means at the bitcoin online store in practice: which tools we use, what data they collect, and how you can stay in control. No marketing jargon, no vague phrases, just a few real plugin names.

In short: As a bitcoin online store, BitcoinStuffStore collects only the information that’s strictly necessary for an order, namely, your name, address, and email address for shipping. We retain your order information for 7 years, as required by the tax authorities. We do not resell anything; analytics tools only load after you give your consent; and when you pay with Lightning or cash in the store, your payment is completely private.

Privacy bitcoin webshop bij BitcoinStuffStore

Privacy at the bitcoin Web Store: Our Guiding Principle

Our guiding principle is simple: collect as little as possible. The less we know about you, the less there is that could ever be leaked or requested. True privacy doesn’t start with empty promises after the fact, but with data we don’t ask you for in the first place. For bitcoiners, this isn’t just a minor detail: anyone who manages their own keys doesn’t want to give away more than necessary, even when making a purchase. Below, you’ll see exactly what privacy means in the bitcoin webshop.

What information does this bitcoin online store collect?

As little as possible. For a working order, we only need this:

  • Email address: for your order confirmation and track and trace.
  • Name, billing and delivery address: for shipping.
  • Phone number (optional): only if the delivery person needs to contact.
  • Order and invoice details: kept for 7 years.

No date of birth, no gender, no profile questions.

Those 7 years are not a choice on our part. The Dutch Tax and Customs Administration requires us to keep invoices for 7 years (the statutory retention period for tax purposes, Article 52 of the General State Taxes Act (AWR)), and an invoice standardly includes the buyer's name and address. Therefore, your NAW details (name, address, city/residence) also fall under that statutory retention obligation.

What data never reaches us?

So this is something we'll never get to see:

  • Full credit card or bank details: We never see those. Everything goes through external payment providers such as BTCPay Server V2 for bitcoin and lightning, Mollie for iDEAL and credit cards, and PayPal.
  • Your passwords or seed phrase: A reputable bitcoin online store would never ask for that. Always manage your own keys.
  • Advertising and tracking profiles: We do not do ad targeting.

Which tools are running on the site (and what do they do)?

These are the tools used in our bitcoin online store setup, solely for statistics, reviews, and functionality:

Google Tag Manager (GTM-W8WK36SJ): the container for our analytics, without own data storage.

Google Analytics 4: anonymous visitor statistics. Works via Consent Mode v2, so your cookie choice determines how much data is sent. No ad targeting.

Microsoft Clarity (r7rjxgwcf9): anonymized session recordings and heatmaps so we can see where visitors get stuck. Form fields such as email, address, and payment details are automatically masked. Do not want this? Then decline the “Statistics” category in the cookie banner.

Trustpilot: sends review invitations via a separate invite.js file, and only after your purchase is complete.

Mailjet: exclusively for the newsletter, and only if you actively subscribe. No automatic opt-in during checkout.

Cloudflare: processes IP addresses for bot protection and a faster site, in accordance with Cloudflare's standard privacy policy.

Cookie banner manages your cookie consent. You can change your preferences or withdraw your consent via the banner or the “Cookie settings” link at the bottom of each page.

What cookies does BitcoinStuffStore use?

Three categories, no more:

  1. Functional: shopping cart and language selection. Cannot be turned off, no personal tracking.
  2. Statistics: Google Analytics and Microsoft Clarity. Load only after your consent.
  3. Marketing not currently active on this site.

During your first visit, you choose what you accept. Do not give permission? Then the statistics tools will not load, and Google Tag Manager respects that choice via Consent Mode.

How private is paying with bitcoin?

That depends on hów you pay. A brief overview:

  • Lightning: off-chain, no public blockchain record. For us, only whether the invoice has been paid matters.
  • On-chain bitcoin: We can see the amount and the transaction ID, but we don't link them to a profile. Want extra privacy? Use a wallet with CoinJoin, such as Sparrow or Wasabi, or pay with Lightning. Afterward, store your bitcoin securely on a hardware wallet.
  • Fiat (iDEAL, credit card, PayPal): The payment provider sees your bank details, we do not. Maximum convenience, slightly less privacy.

Hardware wallet voor self-custody bij een bitcoin webshop

Who does BitcoinStuffStore share your information with?

As the bitcoin online store, we only share information with the parties necessary to fulfill your order:

  • The delivery service: your name and address, otherwise your package will not arrive.
  • The payment provider: the details associated with your chosen payment method.
  • Accounting: the billing information that we are required by law to retain.
  • Mailjet: Only your email address, and only if you sign up for the newsletter.

We do not sell your information to third parties. No affiliate trading with your data, no address lists showing up anywhere else.

What privacy rights do you have?

Under the GDPR, you can always:

  • Your information retrieve or let delete (except for the billing information, which we are required by law to retain for 7 years).
  • Unsubscribe from your newsletter with a single click at the bottom of every email.
  • Withdraw your cookie consent by reopening the cookie banner using the link at the bottom of the page.
  • File a complaint with the Dutch Data Protection Authority.

Submit a request? Email us at office@bitcoinstuffstore.com, and we'll respond within 30 days, usually sooner. You can read the full legal version in our privacy policy. The data controller is BitcoinStuffStore (Chamber of Commerce No. 90462769).

Can you buy bitcoin merchandise anonymously?

The honest answer: It’s impossible to buy 100% anonymously from any online store, including a bitcoin store, as soon as a package needs to be shipped. A name must be on the box, and a payment must be processed. That’s why we keep things as private as possible: recording as little information as possible, retaining it for as short a time as allowed, and never reselling it. That’s what privacy means in practice at a bitcoin online store: going as far as we can, but no further than is fair.

Do you really want to buy or spend bitcoin anonymously? Then stop by our store in Meppel. Pay in cash or with Lightning, no registration required, just face-to-face. That’s the beauty of having a physical store alongside our online shop.

BitcoinStuffStore Meppel zichtbaar op btcmap.org voor anonieme bitcoin aankopen

How to Improve Your Own Privacy: The bitcoin Web Store Approach

We already collect as little data as possible, but you also have a few controls at your disposal. These will help you gain extra privacy at virtually every bitcoin online store:

  • Pay with Lightning or on-chain bitcoin: then no bank or payment provider is involved, meaning you do not share your bank details either.
  • Use a separate email address: Using an email address that you reserve solely for purchases prevents your orders from being linked to the rest of your life.
  • Choose your delivery address carefully: By default, your order is shipped to your home address, but upon request, we can always deliver it to a DHL pickup location. This way, your home address remains out of the delivery service's systems.
  • Reject the analytics cookies: Through the cookie banner, you'll only load the minimum required functionality, without Analytics or Clarity.
  • Manage your keys yourself: After your purchase, store your bitcoin in a separate hardware wallet, such as a Coldcard Q or Blockstream Jade Plus, rather than on an exchange or with a custodian.

Coldcard Q hardware wallet with QWERTY keyboard and color screen

Frequently Asked Questions About Privacy on the bitcoin Web Store

Will my bitcoin payments be linked to my name?

No. With an on-chain payment, we only see the amount and a transaction reference, and with Lightning, we only see whether the invoice has been paid. We do not link that information to a customer profile. If you want extra privacy for on-chain payments, use a wallet with CoinJoin or pay with Lightning.

Can I order without creating an account?

Yes. You simply check out as a guest. An account isn't required for this bitcoin online store, so you don't have to provide a password or create a profile if you don't want to.

Do you use Facebook pixels or ad tracking?

No. There are no Facebook or Google advertising pixels on the site. We do not do retargeting and do not build an advertising profile of you. The only tools that run are for statistics, reviews, and functionality, and those only load after your consent.

How long do you keep my data?

We keep your invoice and order details for 7 years, because the Tax Authorities require this via the fiscal retention obligation (article 52 AWR). We keep your newsletter subscription until you unsubscribe. What we are not legally required to keep, we clean up.

Where are the servers for this bitcoin online store located?

The site runs on a Dutch hosting provider, with Cloudflare in front of it for speed and security. Your data thereby remains within the GDPR framework of the European Union.

Is my email address safe if I subscribe to the newsletter?

Your email address will only go to Mailjet for sending the newsletter, and only if you actively subscribe. We never sell or rent your address, and you can unsubscribe with a single click at the bottom of every email.

What happens to my data in the event of a return?

For a return, we only use your data to process the refund and administration. The invoice is subject to the statutory retention period of 7 years, and we do not keep the rest longer than necessary.

Do you have a question about privacy on the bitcoin online store? Feel free to email me at office@bitcoinstuffstore.com.

Greetings,
Mario

Leave a Comment

Your email address will not be published. Required fields are marked *

This website uses cookies

This site uses cookies to work properly and to analyze your visit. You choose what you allow. For more information, see our Privacy Policy and Cookie Policy. Privacy Policy Cookie Policy