Privacy Policy

Order references. For each order we keep the order ID, the time it was created and the token pair (for example “SOL → ZEC”). Nothing else: no amounts, no wallet addresses, no IP address. These references are deleted automatically after 72 hours.

Public reference data. The list of supported tokens and networks.

To quote and create a swap, our servers forward to our routing partner:

• your IP address, browser user agent and timezone (required for compliance screening);
• the recipient address and optional refund address you enter;
• the tokens and amount of your swap.

We don’t write these to our database or logs. Our routing partner and its exchange partners process them under their own privacy policies; the routing partner states it deletes transaction data after 72 hours unless a support case requires longer. [Name the routing partner here if disclosure is required.]

Your recent order IDs are saved in your browser’s local storage so you can reopen them without an account. They never leave your device unless you open an order. Clear your browser storage to remove them. We don’t set tracking cookies.

• To prevent abuse we rate-limit requests using a salted hash of your IP address held in memory for up to an hour. It is never written to disk.
• Our hosting provider ([Vercel]) may keep standard request logs for a limited period for security and reliability.
• The rewards lookup queries public blockchain data for the address you paste through a Solana RPC provider. We don’t store the address.

• No accounts, no sign-up, no wallet connection.
• No advertising trackers and no selling or renting of data.
• No profiles of individual users.

We respond to valid legal requests. Because we keep so little for so short a time, there is usually very little we can provide. Exchange partners keep their own records under their legal obligations.

Depending on where you live you may have rights to access, correct or delete personal data. Given our 72-hour retention, most data is gone before a request could be processed; contact us and we’ll help.

Contact: [privacy email]. Controller: [Company legal name, address]. This policy is not intended for children under 18.