Privacy Policy
What we do not collect
We do not ask for your name, email, phone number, ID, or any document. We do not require an account. We run no third-party analytics, advertising, or tracking scripts. We do not use tracking cookies.
What we do collect, briefly
- Session cookie (
nsw) — strictly necessary to carry a CSRF token between the page that renders the swap widget and the API that creates an exchange. No identifiers beyond a random token. Cleared when you close the browser. - Order records — the order ID and token returned by the upstream router, the pair, the type (float/fixed) and a timestamp. Kept on disk so you can re-open the tracking page. Purged when the order is settled or expired, and in all cases within thirty days.
- Anti-abuse counters — per-IP counters used to rate-limit the API (e.g. quotes/minute). Written to disk, reset continuously as their window rolls, and never linked to any personal data.
- Web server access logs — the nginx default (method, path, status, user-agent). Retained for up to 24 hours for abuse investigation, then rotated.
Third parties
To fulfill an exchange we forward the pair, amount, destination address and (optionally) refund address to our upstream liquidity router. That party is the source of truth for order metadata, deposit addresses, and settlement. We have no control over its own retention; consult its privacy statement if you need the full chain.
Fonts are loaded from fonts.bunny.net, a privacy-preserving mirror of Google Fonts that does not log IPs or set cookies.
Static assets are served behind Cloudflare as a CDN. Cloudflare receives TLS-terminated requests; we receive the real client IP via CF-Connecting-IP for the sole purpose of rate-limiting.
Your rights
Because we do not hold any personal identifier, we cannot associate the data above with you and therefore cannot action access, rectification or deletion requests at the user level. If you want the order record for a specific order you created to be purged before its natural expiration, provide the order ID and token from the order page and we will delete that single record.
Changes
This policy may change; the "last updated" date reflects the current version.