Privacy policy
This page lists everything we store, why, and for how long. If it is not on this page, we do not collect it.
What we never collect
- There are no accounts, so there is no name, email, phone number or password to collect.
- No IP address is stored with a swap or a message. Rate limiting happens in memory with a key that changes on every restart and never touches the disk.
- No access logs. Our web server is set to record nothing about visits: no addresses, no pages, no swap links, no browsers.
- No cookies for visitors. The only cookie on this site belongs to our own admin login.
- No analytics, ad pixels, session recorders, outside fonts or outside scripts. Our Content Security Policy stops your browser from loading anything we do not serve ourselves.
What a swap stores
| Data | Why | Kept |
|---|---|---|
| Coins, amounts, rate type | To run the swap | 7 days after it ends |
| Receiving and refund address, memo | To pay you or refund you | 7 days after it ends |
| Deposit address and swap reference | To show your status and help with a held swap | 7 days after it ends |
| Anonymous outcome (coin pair, done or held, duration, a broad USD band) | To keep the service reliable | Kept, with no addresses, amounts or IDs |
| Daily totals (number of swaps and total volume per day) | Our accounting | Kept, with nothing about any single swap |
When the retention period ends, the swap record is deleted from our database automatically. The software enforces this. Nobody has to remember to do it.
You do not have to wait. Once a swap has ended, its page has an Erase now button that deletes the record and both addresses on the spot. Deleted records are overwritten on disk, not just unlinked.
Liquidity partners
Swaps are carried out through our liquidity partners. They get only the swap details in the table above, because they need them to complete the exchange. They never get anything else from us.
Messages
If you write to us through the form, email or Telegram, we keep the conversation so we can answer. You decide what to share, and email is optional on the form. Telegram messages reach a support person through our bot. Support sees your Telegram name and username so we know who we are talking to, never your phone number.
Infrastructure
Like every website, traffic passes through our hosting and network provider, which handles connections and blocks attacks. Our own application does not log visitor IP addresses. Market prices are fetched by our server, never by your browser. To show the site in your language when your browser does not say, we read the country our network provider reports for your connection. It is used for that one page view and never stored.
Staying anonymous
- Use a fresh receiving address for every swap.
- Use Monero when you want amounts and addresses hidden on the blockchain itself.
- The site works with JavaScript turned off, so it suits hardened browsers and Tor Browser on its safest setting.
- Erase your swap from its own page when it is done, or write to [email protected] with the swap ID.