Last updated: 7 August 2026. This page is dated because its accuracy depends on what the site is currently running. When that changes, this page changes and the date moves.
Correction, same day: an earlier version of this page stated that the site set no cookies and loaded no third-party scripts. That was true when written and stopped being true when Google Analytics was connected. The page below now describes what actually runs, verified against the live site rather than assumed.
The short version
SteelPhrase does not ask you to log in, does not run comments, and has no accounts. There is nothing here for you to have an account with.
Most importantly, given the subject: this site never asks for a recovery phrase, private key or passphrase, and has no form, field or tool capable of receiving one. If any page ever appears to ask you for one, it is not this site — close it.
What the site does right now
A normal visit to SteelPhrase makes requests to two third parties, both Google, and sets two cookies. Precisely:
- Google Analytics — loaded from
googletagmanager.com. It sets the cookies_gaand_ga_6P049P9XX3, which distinguish one visitor from another so we can see which articles are read. These are the only cookies this site sets. - Google Fonts — the theme loads two typefaces from
fonts.googleapis.comandfonts.gstatic.com. No cookies, but making the request necessarily discloses your IP address to Google.
Everything else — all page scripts, styles and images — is served from this domain. There are no advertising, social, comment or session cookies, because there is no advertising, no social embedding, no comments and no login for you to have.
Check it rather than believe it. Open your browser’s developer tools on any page here, look at the network tab and the cookie list, and confirm the above is the whole story. That is the right attitude to any privacy policy, including this one.
Server logs
The hosting provider records standard web server logs — IP address, timestamp, the page requested, browser user-agent, referring page. This is ordinary and automatic for any website, and is used for security and diagnosing faults. The site is hosted by Hostinger, which processes this data as our hosting provider.
Analytics and advertising
Google Analytics is active. It records aggregate usage — pages viewed, approximate location derived from IP, device and browser, and how you arrived. It is used to understand which articles are worth writing more of. Google is the controller of that data and its own policies and tools govern it; you can opt out with Google’s browser add-on or by blocking the domain.
Google AdSense is not active. No advertising runs on this site today and no advertising cookies are set. If that changes, this page will be updated and re-dated before advertising appears, and this paragraph will say so plainly. If you are seeing advertising while this paragraph still says otherwise, that is an error — please tell us.
When it is enabled: Google and its partners may use cookies to serve advertising, including personalised advertising based on prior visits to this and other sites. You can control that through Google’s Ads Settings.
Advertising will never appear on articles written for people who have just lost funds — specifically the pages on seed phrase “generators” and recovery service scams. That is a commitment stated in those articles themselves, in the editorial standards and in the affiliate disclosure.
Affiliate links
Some links to hardware wallets and backup products earn a commission. Following one takes you to the retailer’s own site, where their privacy policy applies and they may set cookies to attribute the referral. We receive aggregate reporting from those programmes — how many purchases resulted — and never anything that identifies you personally. Details on the affiliate disclosure page.
If you email us, we hold that email in order to reply to it. We do not add you to any mailing list — there isn’t one — and we do not pass your address to anyone.
Please do not send us sensitive information. Email is not secure, and there is no question about your wallet that requires you to send a recovery phrase, private key, passphrase or a photograph of a backup. Anyone asking you to email such a thing — including anyone claiming to be from this site — is attempting to rob you.
Your rights
Depending on where you live, you may have rights to access, correct or delete personal data held about you, and to object to processing. Since this site holds essentially nothing beyond server logs and any email you chose to send, in practice a request usually means deleting an email thread — which we will do on request.
For data held by Google through analytics or advertising once those are enabled, Google is the controller of that data and its own tools and policies govern it.
Children
This site is not directed at children and does not knowingly collect data from them.
Changes
Material changes will be reflected here with an updated date. Contact details are on the contact page.