Harlo Labs

Online miners—
Total pool hashrate—
Accepted shares—
Pool block odds per day—
Pool best difficulty (current round)—

Next free spin in.

—

Save your credits, spin for Bolts, and work toward items in the store.

How rewards work.

0% pool fee [Minimum payout: 1,000 sats]

Block finder50%

For the miner who finds the block.

Community50%

Shared by recent verified work.

Join the pool.

Point your BCH-compatible SHA-256 miner here.

Worker
YOUR_BCH_ADDRESS.asic1
Password
x

Found blocks.

HeightMiner walletStatusRewardFound

Best shares.

RankWalletDifficulty
Loading rankings…

Most Bolts.

Current account balances.

RankWalletBolts
Loading rankings…

Top hashrate.

Top ten wallets by estimated 15-minute hashrate.

RankWalletHashrate
Loading rankings…

Welcome to HarloLabs

HarloLabs

Essential cookies and storage keep your login, security, preferences, and pending requests working. They stay enabled.

Optional first-party analytics records page views, button clicks, successful login steps, completed spins and wallet links on our server. IPs use protected identifiers; account activity is linked internally for admin reports. We do not record form values, passwords, security codes or browsing sessions, and do not use external analytics services. Authorized email-verified report viewers may see account emails and recorded activity as explained in the Privacy Policy.

First-party analytics runs unless you opt out or your browser sends a privacy signal. Your explicit choice is remembered on this browser for 180 days. You can change it here anytime. Turning analytics off stops future collection; it does not automatically erase earlier data. Read the Privacy Policy.

Effective: · Last updated:

These terms explain how the HarloLabs Bitcoin Cash Pool, accounts, spins, and Bolts store work. By using the service, you agree to these terms. Questions? Email [email protected].

Mining and BCH rewards

Mining involves chance. An accepted share records mining work; it does not guarantee a block or BCH payment. BCH rewards follow the pool’s displayed payout rules and depend on a valid block being accepted and remaining on the blockchain. Hashrate and difficulty displays are estimates.

BCH rewards go to the wallet addresses used by miners. Check your address before mining: blockchain payments cannot normally be reversed. We do not need your wallet’s private keys or recovery phrase. You are responsible for your hardware, electricity, network connection, and wallet security.

Your account and linked wallets

Accounts use verified email login codes, with optional authenticator two-factor authentication. Protect your email, authenticator, and recovery codes. Login sessions currently last up to 30 days unless ended earlier.

Linking a wallet does not prove ownership or change its BCH payouts. A wallet can be linked to only one account at a time, and must have the required recorded pool activity before linking. Unlinking resets its spin qualification progress.

Spins and Bolts

Currently, one named miner running any firmware on a linked wallet must individually sustain at least 800 GH/s for one hour, with fresh accepted work. Hashrate and time from separate miners do not combine. The existing five-minute grace period applies; longer gaps reset that miner’s qualification.

Each qualified account earns one spin credit at each four-hour award time, regardless of how many wallets qualify. Credits can be saved. Spending one credit creates one server-selected outcome using the configured weighted chances. An outcome can award zero Bolts; the credit is still used. A particular reward is never guaranteed, and the opening demonstration animation does not spend credits or award Bolts.

Bolts and spin credits are promotional account credits used within this service. The website does not provide cash or cryptocurrency withdrawals for them. Store items, prices, stock, reward chances, and qualification rules may change for future activity. A monthly prize-value message describes a promotion, not a guaranteed individual win.

Bonus prizes

Operators may run separate promotional bonus draws among currently eligible verified accounts, with one entry per account. A selected prize is reserved and revealed on a later spin; it does not replace that spin’s random Bolts result or use an additional credit. Eligibility is checked when the bonus is selected. Physical bonuses are saved for fulfillment without a Bolts charge, and we contact the winner through their registered email to arrange shipping. Clearly marked test bonuses are previews and do not create a shipment.

Store redemptions

Review the item and Bolts cost before confirming. A successful redemption deducts the Bolts and records a request; it does not mean the item has shipped. Fulfillment is arranged manually through your verified email. Availability and any delivery arrangements must be confirmed. An enrolled account must pass two-factor verification when redeeming.

Cookies and optional analytics

Essential cookies and browser storage support login, security, preferences, and reliable requests. Optional first-party analytics measures page views, named clicks, successful login steps, completed spins and wallet links on our server only after you accept. There are no session recordings or external analytics in this version. Acceptance is separate from these terms and is not required to mine, log in, earn or spend credits, redeem items, or receive notifications. Withdraw through Cookie settings in the footer. Our Privacy Policy explains identifiers, admin access, retention and choices.

Use the service fairly

Use only equipment and accounts you are authorized to access. Do not submit fake work, attack the service, impersonate others, exploit bugs, or try to bypass qualification, account security, or credit limits. We may restrict access while investigating abuse and correct records affected by proven errors or abuse. Contact us if you think a correction is wrong.

Availability and updates

We work to keep the service available, but outages, software errors, delayed notifications, and changing network conditions can occur. Temperature and offline alerts are convenience features, not safety controls for your miner. Keep your device’s own protections enabled.

Use the service only where permitted by applicable rules. These terms do not remove rights that the law does not allow us to exclude. Material service or policy changes will be described on the website with an updated effective date; where required, we will seek additional consent.

Contact

For account, pool, reward, or policy questions, email [email protected]. Our Privacy Policy explains the information used to run the service.

Effective: · Last updated:

This policy covers pool.harlolabs.com and its mining and account services. In plain language: we use your email to run your account, mining records to operate the pool and calculate rewards, optional device information to show stats and send alerts, and first-party website analytics unless you opt out or your browser sends a privacy signal. Privacy contact: [email protected].

What we collect and why

What other people can see

Wallet addresses and named-worker mining information are publicly viewable by looking up a wallet. Depending on the miner, this can include firmware, hashrate, best shares, connection state, and reported device stats. Wallet and device spin qualification can also be shown publicly. Do not put private information in worker names.

Your account email, private balances, recovery codes, and account history are not part of the public wallet view. A win share link is public to anyone who has it and may be fetched or cached by social platforms. It shows the recorded win amount, not your email, wallet, or account balance. BCH blockchain records are public and cannot be erased by this website.

Cookies and storage on your device

We use essential cookies for email-code verification, your login session, two-factor verification, and notification-device identification. A login lasts up to 30 days. Browser storage remembers recently checked wallets, sound, first-visit introduction and notice-dismissal preferences, and pending spin or redemption request references so retries do not spend twice. Those references are not passwords or recovery codes.

Our own first-party analytics runs without a cookie popup unless you opt out or your browser sends a privacy signal. The footer’s Cookie settings button lets you turn it off or on. Existing opt-outs are honored. An explicit choice is saved in browser storage for 180 days; when it expires, the default applies again. If browser storage is blocked, your choice may last only for the current page visit. We honor Global Privacy Control and Do Not Track signals by keeping optional analytics off. Turning analytics off does not affect mining, login, spins, purchases, or notifications.

Optional first-party analytics

When analytics is enabled, our own server records timestamped page views, named button/link clicks (including the Stratum copy button), email-login steps, completed logins, completed spins and Bolts won, and wallet links/unlinks. We use a random browser identifier and a protected, keyed representation of your IP address to count visitors and unique IPs. Raw IP addresses and full browser user-agent strings are not stored in the analytics database. A browser category such as Safari or Chrome is stored. The website and security logs described above may separately contain IP addresses.

When you are logged in, enabled analytics events reference your internal account ID so authorized administrators can measure daily active accounts and weekly return activity and view the associated account email. Anonymous events do not contain an email. Protected IP identifiers can still distinguish connections; a shared IP can represent several people. Counts cover browsers with analytics enabled and do not represent every visitor.

Analytics is stored separately in analytics.sqlite. Detailed events are retained for 90 days; daily summaries, protected visitor identifiers and account activity summaries for up to one year. The first observed login date is retained while the account exists to support cohort reporting. Backup copies can persist according to the backup practices below. There are no session recordings, heatmaps, captured form values, security codes, wallet addresses, recovery codes or confidential reward chances in analytics. Analytics does not change your mining rewards or account balances.

Choosing Essential only or turning analytics off stops future optional analytics from that browser and clears its analytics identifier where accessible. The server checks the choice on each event or account action. Your choice lasts 180 days on this browser, is not shared across your devices, and is not required to mine or use your account. Existing analytics records are not automatically deleted when you opt out; contact us about access or deletion. Prior external-analytics choices are not reused.

Reported pool firmware names and counts are also summarized from existing mining connection data to operate and monitor the pool. Firmware names are self-reported; they are not proof of firmware authenticity. This operational inventory is separate from optional browser analytics.

This version does not load PostHog or send new analytics to an external provider. Earlier versions used PostHog; records already transmitted may remain there under that project's retention settings. Contact us with questions about earlier data.

Optional introduction video

The first-visit introduction does not autoplay. The video loads from Shopify’s CDN only when you press Play, which shares your IP address and technical request information with that provider. Browser storage remembers that the introduction has been shown so it does not appear on every visit. Clearing that storage or using another browser may show it again.

Email and push notifications

We send your email address and a one-time login code to Zoho/ZeptoMail to deliver account emails. Our login emails disable open and click tracking.

If you enable push notifications, we save the browser’s push subscription endpoint and delivery keys with your account. Alerts are delivered through your browser or device’s push provider, such as Apple or Google. Push messages can contain worker names, temperatures, best-share results, or pool block information, and may appear on your lock screen. They do not include your email, login code, or recovery codes.

Push subscriptions can remain active after your login expires. You can disable alerts in your profile or device settings. Logging out disconnects this device’s subscription. Expired or rejected subscriptions are removed when detected.

Who receives information

Authorized operators can grant named recipients read-only access to the analytics dashboard, including account emails, timestamped consented actions and usage reports. Each link requires a verified login matching its allowed email, expires after the chosen period (up to 30 days), and can be revoked. These reports do not expose login codes, recovery codes, raw IP addresses, wallet addresses or admin controls. A recipient may retain information they already viewed.

Authorized HarloLabs operators can access the records needed for support, security, rewards, and fulfillment. Our server hosting and backup systems process the data needed to provide the service. Email and push providers receive the information described above. We do not send new analytics to PostHog or other external analytics services. Processing locations depend on those providers and can be outside your country.

If a redemption needs delivery details, we arrange that separately by email. We do not sell account information or use it for targeted advertising. Information may also be disclosed when legally required or needed to investigate abuse. Visiting store links or sharing to X or Facebook takes you to a separate service with its own privacy practices; we do not send your account email through those share buttons.

How long information stays

Email login codes expire after 10 minutes, and login sessions after up to 30 days; expired authentication records are cleaned up periodically. Mining and telemetry charts normally keep minute detail for about 24 hours and hourly detail for about 7 days. Devices disconnected for more than 15 minutes are removed from the wallet page with their device-specific data; aggregate work and reward accounting can remain.

Account, wallet-link, reward, redemption, and audit history currently has no automatic deletion date. These records maintain balances and reward history and help resolve support issues. Server logs and backups may retain copies after a record is removed from the active service. We do not promise immediate deletion from every backup.

Your choices and requests

You can use public pool views without an email account, choose whether to enable notifications or two-factor authentication, change alert thresholds, unlink wallets, log out, clear browser storage, and accept or reject optional analytics through Cookie settings.

For access, correction, or deletion requests, email [email protected]. We may ask you to verify control of your account before acting. Tell us what you want changed or removed. We will explain any records we need to retain for accounting, security, or legal reasons, and the effect on account access or saved rewards. There is currently no self-service account deletion button.

Security and changes

We use encrypted website connections, access controls, protected authentication records, and optional two-factor authentication. No online service can guarantee complete security. Never email your wallet seed phrase, private key, or account recovery codes. Enter account codes only in the legitimate login or security forms.

We will update the effective date when this policy changes and describe material changes on the website. Where required, we will request consent before using information for a new purpose.

You won!

A gift for you!

Send this gift?

Draw bonus winner?

Redeem item

The Bolts will be deducted now. Your request is saved for fulfillment through your verified account email.