Privacy policy
This page lists everything SwapPrivate stores, why, and for how long. If something is not on this page, we do not collect it.
What we never collect
- No accounts, so no name, email, phone number or password.
- No IP address is stored with a swap or a message. Rate limiting happens in memory with a key that changes on every restart and is never written to disk.
- No access logs. Our web server is set to record nothing about visits: no addresses, no pages, no swap links, no browsers.
- No cookies for visitors. The only cookie on this site is the login cookie of our own admin page.
- No analytics, ad pixels, session recorders, third party fonts or third party scripts. Our Content Security Policy blocks the browser from loading anything that is not served by us.
What a swap stores
| Data | Why | Kept |
|---|---|---|
| Coins, amounts, rate type | To run the swap | 30 days after it ends |
| Receiving and refund address, memo | To pay you or refund you | 30 days after it ends |
| Deposit address and swap reference | To show your status and help with a held swap | 30 days after it ends |
| Anonymous outcome (coin pair, done or held, duration, a broad USD band) | To keep the service reliable | Kept, with no addresses, amounts or IDs |
| Daily totals (number of swaps and total volume per day) | Our accounting | Kept, with nothing about any single swap |
After the retention period the swap record is deleted from our database automatically. This is enforced by the software, not by a promise to remember.
You do not have to wait. Once a swap has ended, its page has an Erase now button that deletes the record and both addresses on the spot. Deleted records are overwritten on disk, not just unlinked.
Liquidity partners
Swaps are executed through our liquidity partners. They receive only the swap details in the table above, because they need them to complete the exchange. They never receive anything else from us.
Messages
If you write to us through the form, email or Telegram, we keep the conversation to answer you. You choose what to share. Email is optional on the form. Telegram messages are relayed to a support person through our bot. Support sees your Telegram name and username so we know who we are talking to, never your phone number.
Infrastructure
Like every website, traffic passes through our hosting and network provider, which handles connections and blocks attacks. Our own application does not log visitor IP addresses. Market prices are fetched by our server, never by your browser.
Your choices
- Use a fresh receiving address for each swap.
- Use Monero when you want amounts and addresses hidden on the blockchain itself.
- The site works with JavaScript turned off, so it suits hardened browsers and Tor Browser on its safest setting.
- Erase your swap from its own page when it is done, or write to [email protected] with the swap ID.