Privacy Policy

What we store

For each order we record: internal order ID, provider name and provider order ID, input and output assets, amount, status, optional transaction hash, and timestamps. The destination XMR address and the provider deposit address are recorded too — but only for as long as the swap is running. See retention below.

What we never store

We never store wallet credentials, custodial balances, user funds, browser fingerprints, tracking cookies or marketing identifiers. Provider API credentials live as server-side environment variables and are never exposed to the frontend. One caveat, stated plainly: your IP address is written to a short-lived rate-limiting key so we can block abuse. It expires within the rate-limit window (a minute or less) and is never written to the database, never logged, and never linked to an order.

Third-party providers

Provider APIs receive only the information needed to create and process the swap. Each provider has its own privacy policy, AML rules, and retention periods. Review each provider's terms before creating an order.

Data retention

Addresses are erased as soon as a swap reaches a final state (completed, failed, expired or refunded): destination address, provider deposit address, deposit memo and refund address are all overwritten, including any copy of them inside stored provider responses. Orders that never reach a final state — abandoned before deposit, or left hanging by a provider — are swept by a daily job after 30 days. What survives is non-identifying: amounts, provider name, status and timestamps, kept for accounting and dispute resolution.

In your browser

Besides the order data above, this site keeps a few items in your browser's storage. Four are ours, and each is written only when you use what it serves: the language you chose (a cookie, sent with each request so pages come back in your language), whether you dismissed the analytics notice, whether you use simple or expert mode, and the My swaps list. For each swap created from this browser, that list keeps its page identifier, creation time, provider, amount and assets — never an address. You can clear it from the My swaps page. Two more come from the wallet-connection libraries: the one for EVM wallets (wagmi) writes its state on every visit and, once you connect a wallet, keeps that wallet's address so the connection survives a reload; the one for Bitcoin wallets remembers which wallet app you chose, once you have used it. None of these items is sent to our servers, except the language cookie.

Your rights

Because we collect minimal data and never tie orders to a user identity, most privacy regulations do not apply in their usual sense. For specific deletion requests on an order ID, contact the address listed in the Terms.

Contact

Privacy questions and deletion requests can be sent to the contact address published in the Terms. We respond to good-faith requests within 30 days.