Privacy Policy

What we store

For each order we record: internal order ID, provider name and provider order ID, input and output assets, amount, status, optional transaction hash, and timestamps. The destination XMR address and the provider deposit address are recorded too — but only for as long as the swap is running. See retention below.

What we never store

We never store wallet credentials, custodial balances, user funds, browser fingerprints, tracking cookies or marketing identifiers. Provider API credentials live as server-side environment variables and are never exposed to the frontend. One caveat, stated plainly: your IP address is written to a short-lived rate-limiting key so we can block abuse. It expires within the rate-limit window (a minute or less) and is never written to the database, never logged, and never linked to an order.

Third-party providers

Provider APIs receive only the information needed to create and process the swap. Each provider has its own privacy policy, AML rules, and retention periods. Review each provider's terms before creating an order.

Data retention

Addresses are erased as soon as a swap reaches a final state (completed, failed, expired or refunded): destination address, provider deposit address, deposit memo and refund address are all overwritten, including any copy of them inside stored provider responses. Orders that never reach a final state — abandoned before deposit, or left hanging by a provider — are swept by a daily job after 30 days. What survives is non-identifying: amounts, provider name, status and timestamps, kept for accounting and dispute resolution.

Your rights

Because we collect minimal data and never tie orders to a user identity, most privacy regulations do not apply in their usual sense. For specific deletion requests on an order ID, contact the address listed in the Terms.

Contact

Privacy questions and deletion requests can be sent to the contact address published in the Terms. We respond to good-faith requests within 30 days.