Privacy

The short version

We keep no accounts and run no analytics, ads or trackers. Your wallet keys never reach us. We store sealed orders we cannot read until their batch closes, and after that the orders are public by design.

What stays on your device

• Your Monero wallet files (keys and cache), encrypted with your passphrase, in IndexedDB.
• The plaintext of orders you sealed, so you can follow their fills.
• Your cookie choice and, if you allow preferences, the Monero node you picked.

What reaches our server

• Sealed orders: a timelock ciphertext, its SHA-256 commitment, the batch number and the time received. After the close, the decrypted order (side, size, limit price, ETH address, Monero address for buyers, a random nonce) is published with the batch.
• Standard request data handled by our hosting provider (IP address, user agent, time) in short-lived logs used to keep the service running and to stop abuse. We do not link it to orders.

Third parties your browser talks to

The Monero node you choose (it sees which blocks you fetch and the transactions you broadcast), the drand network api.drand.sh (beacon reads), and our API, which fetches a public XMR and ETH price from CoinGecko. Each has its own privacy policy.

Legal basis and retention

We process order data to run the service you ask for (performance of a contract) and request logs for security (legitimate interest). Published batches stay public, since anyone must be able to verify them. Logs are kept for at most 30 days.

Your rights under the GDPR

You may ask for access to, correction of, or erasure of data about you, restrict or object to processing, and ask for portability. Because we keep no account, tell us the commitment or the address concerned. A published batch can only be changed by removing the decrypted order from the public copy; its ciphertext stays, since it is what makes the batch verifiable. You can also complain to your data protection authority.

Contact

Reach the operators through a direct message to our X account.