Loading market data...

Privacy Warning Tells Bitcoin Users to Skip Public Block Explorers

Privacy Warning Tells Bitcoin Users to Skip Public Block Explorers

A warning posted on X on Aug. 5 urged Bitcoin users to stop entering their own wallet addresses into public block explorers, claiming the sites log visitors' IP addresses, sell that information to Chainalysis, and hand it over to government agencies. The post has reignited a long-simmering debate about how much privacy you give up just by looking up a transaction. The reality, based on the privacy notices of major explorers, is messier than the warning suggests.

What the warning says

The Aug. 5 post frames the issue bluntly: don't paste your address into a block explorer if you care about anonymity. It alleges that hosted explorers record connection details — including your IP address and the exact page you requested, which often contains a wallet address — and that this data is sold to Chainalysis, a blockchain analytics firm. The warning also says government agencies can get access through legal requests.

WalletExplorer, one of the sites named in the broader discussion, has a privacy notice that backs up part of that claim. It says its servers automatically record IP addresses and the requested URL, which may include a wallet address. The notice, last updated Oct. 14, 2021, says visitor information is shared with other Chainalysis business lines and service providers, and that legal disclosure is possible under law enforcement requests. It does not specify a numeric limit for how long those logs are kept.

How explorers actually handle your data

Public block explorers let anyone type in an address or transaction ID to pull records from a blockchain. When you use a hosted explorer, the server receives your connection details and the page you asked for. That can link your IP address to interest in a specific wallet. But the policies differ sharply from one explorer to the next.

Mempool.space, for instance, deletes webserver logs after 10 days and uses no third-party analytics. Blockchair keeps IPs in clear or masked form for 1-2 days. Etherscan stores originating IPs off by default, retains raw logs for at least 5 days, and purges inactive personal data within 24 months. Blockchain.com and OKLink have platform-wide policies that don't specify how IPs are paired to queries.

The differences matter. A site that keeps logs for 10 days with no third-party sharing is a different privacy proposition than one that hands data to an analytics firm indefinitely.

A 2021 precedent

This isn't just theoretical. In 2021, CoinDesk reported that it had authenticated leaked documents describing how WalletExplorer IP data linked to Bitcoin addresses was used to generate leads for law enforcement. That report gave concrete weight to the idea that explorer traffic can end up in an investigation.

Whether the Aug. 5 warning changes anyone's habits is another question. But it does highlight a practical gap: there's no universal standard for how explorers treat connection logs. Some are aggressive about deletion; others hold data for years or share it with affiliates.

For now, the safest takeaway is simple: if you don't want your IP tied to a wallet address, don't paste that address into a hosted explorer. Run your own node, use a local tool, or accept the risk. The warning may overstate the reach of Chainalysis, but the underlying concern isn't baseless.