slothy.win hosts three independently-operated services: a Pomegranate/FROST threshold-signing operator, an Ark payment delegate, and a Nostr relay. Each section below is scoped to one service only — read the section for the service you're actually using.
The operator holds one shard of a threshold-split Nostr private key (via fiatjaf's Pomegranate/ FROST protocol) on behalf of someone who chose to split their key across several independent operators. No single operator, including this one, ever holds a complete private key.
No other profile data is requested from Google — the sign-in scope is limited to
openid and email. Nothing is sold, shared with advertisers, or used for
anything beyond the recovery/erase flow described below.
Data is kept until the registrant erases it themselves, or contacts the operator directly to request removal. Erasing and recovering a shard both go through the same Google sign-in gate: https://pomegranate.slothy.win/po/erase/google (erase) and https://pomegranate.slothy.win/po/recover/google (recover). In normal use these are opened automatically by the client application that registered the shard in the first place — the operator's own page does not surface a self-service link to them, so if you don't recognize a client doing this on your behalf, you can still use the links above directly or email us to request removal.
Recovery detail worth knowing: when a recovery is confirmed, the shard is
handed back to whichever browser window or tab opened the recovery popup, via a same-origin-
unrestricted postMessage. Only start a recovery from a client application you trust —
anything that opened that popup can receive the shard.
A fulmine Ark payment delegate: it co-signs off-chain Bitcoin/Ark transactions on behalf of clients that connect to it, for a fixed fee. There is no account system and no sign-in.
No personal data is collected — no email, no account, no profile. Requests to the delegate API are subject to standard operational logging (timestamps, IP addresses) for abuse prevention and debugging, the same as any web service.
The Nostr relay has its own privacy policy, published on its own site: nostr.slothy.win/privacy.
For any of the services above: abuse@slothy.win