Privacy Policy

1. Who we are

Swapoon (the "Service") is operated by Swapoon. This policy explains what data we process when you use the Service, and why.

2. Our approach

Swapoon is built to be privacy-first. Standard swaps require no account, no email, and no identity verification. We collect as little data as is technically necessary to operate the Service, and we do not sell your data or use third-party advertising trackers.

3. Data we process

Swap data. To perform a swap we process the details you provide or generate: the assets and networks involved, the amount, the deposit address, the receiving address, transaction hashes, and the resulting order status. This data is necessary to create, route, and track your swap.

Provider-mandated metadata. For certain provider-routed swaps, limited connection metadata — such as IP address, user-agent string, and accepted-language headers — may be recorded and retained where a liquidity provider's commercial or compliance terms require it. [[ CONFIRM the exact fields and retention period against your provider agreements; in the current implementation this metadata is stored for provider-routed orders and retained for at least one year ]]

Affiliate accounts. If you register for the affiliate program, we process the payout addresses you provide, an affiliate code, a hashed access token, and aggregate performance figures (clicks, swaps, volume, earnings).

Contact messages. If you contact us, we process the name, email, and message content you submit so we can respond.

Optional notifications. If you opt in to Telegram notifications for a swap, we process the Telegram chat identifier you provide in order to send that notification.

4. What we do not collect

For standard swaps we do not ask for your name, email, government identification, or any KYC documentation. We do not build advertising profiles.

5. Why we process your data (legal bases)

We process swap data to perform the service you request; provider-mandated metadata and screening to comply with our providers' and our own legal and compliance obligations; affiliate and contact data on the basis of your request or our legitimate interest in operating and supporting the Service.

6. Blockchain data is public

Transactions are recorded on public blockchains that we do not control. Information written to a blockchain — such as addresses, amounts, and transaction hashes — is public and permanent by design, and is outside our ability to alter or erase.

7. International transfers

Our providers and infrastructure may process data in countries other than yours. [[ If a transfer-restriction regime applies (e.g. GDPR Chapter V), describe the safeguards used, such as standard contractual clauses ]]

8. Retention

Operational swap records are retained for as long as needed to provide the Service and support, and to meet applicable legal obligations, then deleted or anonymized. Provider-mandated compliance metadata is retained for the period the relevant provider requires. Affiliate data is retained while the account is active.

9. Cookies and local storage

We use only the minimal cookies or local storage needed to operate the Service — for example, to maintain a swap session or an affiliate session. We do not use third-party advertising or analytics trackers.

10. Your rights

Because standard swaps are account-free, there is often no personal profile for us to access or delete. Where we do hold data relating to you (for example, an affiliate account or a contact message), you may request access, correction, or deletion, subject to applicable law and to data that is public on-chain or that we must retain for legal reasons.

11. Security

We take reasonable technical and organizational measures to protect the data we process — for example, storing access tokens only in hashed form and encrypting sensitive provider tokens at rest. No system is perfectly secure, and we cannot guarantee absolute security.

12. Children

The Service is not directed to, and may not be used by, anyone under 18.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date reflects the latest revision.

14. Contact

For any privacy question, or to exercise your rights, please use our contact page. [[ Add a dedicated privacy contact address if your regime requires one ]]