Privacy Policy

1. Who we are

Swapoon (the "Service") is operated by Swapoon. This policy explains what data we process when you use the Service, and why.

2. Our approach

Swapoon is built on a strict zero-collection principle. Standard swaps require no account, no email, no phone number, and no identity verification. We collect virtually nothing from your browser or wallet, ensuring complete privacy by design.

3. Data we process

Ephemeral swap data. To execute a swap, Swapoon temporarily processes only the transaction hash, order status, and provider routing parameters directly in memory. No IP address, user-agent string, or browser metadata is recorded.

Blockchain interactions. When you deposit funds, Swapoon records the incoming transaction hash and outgoing swapped amount solely to track the swap's progress. This data is processed in real time and deleted within 24 hours of swap completion (or immediately upon refund).

4. What we do not collect

We do not collect your name, email, phone number, government ID, or any KYC documentation. We do not log IP addresses, geographic location, device type, or browser fingerprints. No third-party analytics, advertising trackers, or persistent cookies are used for profiling.

5. Why we process your data (legal bases)

We process swap data to perform the service you request (contractual basis) and to comply with liquidity provider routing requirements (legitimate interest). Processing is strictly limited to what is technically necessary for a single swap cycle.

6. Blockchain data is public

Transactions are recorded on public blockchains that we do not control. Information written to a blockchain — such as addresses, amounts, and transaction hashes — is public and permanent by design, and is outside our ability to alter or erase.

7. International transfers

Liquidity providers and infrastructure may process data in countries other than yours. Where applicable, we rely on standard contractual clauses or adequacy decisions to ensure compliance with data protection laws.

8. Retention

All swap data is ephemeral. Transaction records are automatically deleted from our systems within 24 hours of swap completion (or immediately upon refund). No persistent database stores user activity, IP addresses, or metadata beyond the active swap session.

9. Cookies and local storage

We use only minimal, non-persistent session identifiers to maintain a swap interface during execution. These are stored locally in your browser but do not contain personal data and are deleted when you close the tab or after the swap completes.

10. Your rights

Because standard swaps collect no personal data, there is typically nothing to delete or modify. Where we process optional data (e.g., contact messages), you may request access, correction, or deletion at any time, subject to applicable law and on-chain immutability.

11. Security

We take reasonable technical and organizational measures to protect the data we process — for example, storing provider API keys in encrypted form and using secure memory allocation for swap metadata. No system is perfectly secure, and we cannot guarantee absolute security.

12. Children

The Service is not directed to, and may not be used by, anyone under 18.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date reflects the latest revision.

14. Contact

For any privacy question, or to exercise your rights, please use our contact page.