Privacy
Short, because there is little to describe.
What we do not collect
- No email address, phone number, name or payment details
- No third-party analytics, advertising scripts, fonts or embeds: every file is served from this domain
- No tracking cookies
Accounts
An account is a randomly generated key and a randomly assigned name. The key is shown once. We store only a keyed hash of it, so we cannot recover it and a copy of our database would not reveal it. If you lose the key, the account is gone.
Cookies
One cookie, set only when you sign in, keeps you signed in for up to 30 days. It is not readable by scripts. Your colour-theme choice is kept in your browser's local storage and never sent to us.
Logs and abuse protection
To limit spam, the server counts recent form submissions per visitor in memory, using a salted hash that changes on every restart. Nothing derived from your network address is written to disk by the application. A hosting provider or network proxy in front of the site necessarily sees connection addresses; use Tor if that matters to you.
Rate comparison
When you compare swap rates, our server asks each swap service for a quote and sends only the two coins and the amount. Your browser does not contact those services, and nothing about you is passed on.
What you submit
Reviews, incident reports and service submissions are public once approved, under your random account name. Transaction references you attach as evidence are visible to moderators only.
Outbound links
Links to listed services send no referrer. Links that carry a referral code are labelled and listed on the transparency page.
Removal
You can delete your reviews and your account from the account page.