Privacy

One thing, and only if you change it:

• Your light or dark preference, in localStorage under rpcnode-theme. It never leaves your browser and is never sent to us. Clearing site data removes it.

No cookie is set for reading the site. The only cookie this platform issues is a session cookie for the operator console, which requires an account that only the people running this deployment have. If you have not logged in, you do not have one.

The same thing every web server sees when you request a page: your IP address, the URL, the time, the response status, your user agent and — where your browser sends one — the referring page.

Two uses, both operational:

• Rate limiting. The public API is limited per address, so a counter keyed on your IP exists for a short window. It is held in memory, expires on its own, and is not linked to anything else.
• Diagnosing errors and abuse. Request logs are kept short-term to find faults and to identify traffic that is degrading the service for other readers.

These logs are not analysed for behaviour, not joined to anything, not shared, and not used to build a picture of any reader. They are operational exhaust, kept because a server that logs nothing cannot be debugged.

There is a third use, and it only happens if you ask for it: on Nearest to me an IP address is turned into an approximate location so that endpoints can be suggested for it. That address is normally one you type in rather than your own, nothing about it is stored, and it is set out in the next section.

One page, Nearest to me, answers “which endpoint suits where my code runs”. To do that it turns an IP address into an approximate location and finds the closest place we operate a probe.

Four things are true of it, and they are the reason it is a section of its own:

• The address is yours to give. The page asks for the public address of the host that will make the calls — usually a server, and usually not the machine you are reading this on. Choosing a region instead skips address handling altogether, and no address is read or sent on that path.
• Your own address is only ever a suggestion. The address your connection appears to come from is shown beside the field so you can use it if it happens to be the right one. It is not submitted for you and no result is computed from it unless you ask.
• Nobody else is involved. The lookup runs on our own server against a database file we host, the same one used for the node map. No geolocation service is contacted, so no third party learns the address or that it was asked about.
• Nothing is kept. The address is not written to a log, a table or a cache. The location derived from it exists for the length of one request and is discarded with it. Responses from this page carryno-storeso that no cache between us holds an answer computed for you.

The result is an approximation twice over, and the page says so rather than burying it: a database places an address to a city at best, and the figures shown were measured from our nearest probe rather than from your host. Where that probe is thousands of kilometres away, the page states the distance and says the answer describes our coverage more than your location.

Since 24 August 2026 this site counts page views, using Plausible running on our own server. It replaced counting nothing at all, and the section below on changes says so because quietly adding a tracker would contradict the premise of the site.

It is worth being precise about what that does and does not involve, because “analytics” covers both a page counter and a surveillance network.

• No cookie, and nothing stored on your device. There is no identifier to store, so there is nothing to ask your permission to store, and no banner.
• No third party sees you. The script and the endpoint it posts to are served from this domain and proxied to software on the same machine. Your browser makes no request to an analytics company. That is why the section below still lists only two places a third party can see you.
• Your address is used and discarded. To tell a returning reader from a new one within a single day, a one-way hash is computed from your IP address, your browser’s user agent and a secret that rotates every day. The hash is stored; your IP address is not. Because the secret changes daily, yesterday’s hash cannot be matched to today’s, so you cannot be followed from one day to the next — by us or by anyone reading the data.
• What is kept. The page visited, the referring site, and coarse device, browser and country derived from the same request. Nothing at the level of a street, a person or a session that spans days.
• Two clicks are also counted. Following a link that leaves this site records which destination was chosen, and downloading a file records which file. Both are counted the same way as a page view — against a hash that expires within the day, never against you — and neither tells the destination anything. Our outbound links still carry noreferrer, so the site you arrive at is not told which of our pages sent you.
• Not sold, not shared, not exported. There is no third party to share it with, which is the point of hosting it here.

The lawful basis is legitimate interests: knowing which pages are read tells us what to measure next and what to write. We consider it a low-intrusion use because it produces no identifier that outlives a day and no profile of anybody. If you would rather not be counted, any content blocker will stop it, and the site works identically without it — nothing here depends on the script loading.

Two places. Both are disclosed here because a privacy page that claims “no third parties” while the browser is talking to one is worse than no page at all.

• Map tiles. The network map loads its basemap from an open tile service, which necessarily sees your IP address and which tiles you asked for. Every other page on this site loads nothing from anywhere but here. If you do not want that request made, do not open the map.
• Links you click. We link out to block explorers, provider documentation and specifications. Following one is a normal visit to that site under their terms. Our outbound links carry noreferrer, so the destination is not told which of our pages you came from — though we do count that the link was followed, which the section above describes.

There is no font CDN, no script CDN, no embedded video, no comment system and no social widget. Everything else the page needs is served from this origin.

Most of what this site publishes is machine data: response times, error classes, block heights, node addresses. It describes infrastructure rather than individuals.

Two categories deserve saying out loud, because they look like personal data and are not:

• Validator identities are public keys published by the chain itself. We index what the chain publishes, and we attach no identity to them beyond the name their operator chose to publish.
• Node and validator locations are the approximate geographic location of an IP address, resolved from a public database. They describe where a machine is routed — almost always a datacentre — and are never a claim about where a person is. Addresses that do not resolve stay unresolved rather than being assigned a country.

If an address published on this site is a home connection rather than infrastructure and you would like it removed, write to us and we will remove it.

Where data protection law applies to you — including the UK GDPR and the EU GDPR — you have the right to ask what we hold about you, to have it corrected, to have it erased, and to object to its processing.

In practice the answer to the first is usually “request logs from the last few days, which we cannot tie to you without your IP address and the approximate time”. We would still rather you asked than assumed.

Where we process anything that is personal data, the lawful basis is legitimate interests: running a public service, keeping it available, understanding which parts of it are read, and preventing abuse. We have kept what is collected to the minimum that permits, which is why the visit counting produces no identifier that survives a day.

privacy@rpcnode.io — access, correction and erasure requests

On 24 August 2026 self-hosted, cookieless visit counting was added, and the section on how visits are counted describes exactly what it does. Before that date this site counted nothing. It is recorded here rather than quietly made, because adding a tracker without saying so would contradict the entire premise of the site — and the same applies to whatever changes next.