A swap needs coins and an address. It does not need to know who you are. This policy explains the little we keep and why.
Who is responsible
HiddenSwap is responsible for the data described here. You can reach us at contact@hiddenswap.com.
What we collect
Swap records. For each swap we store:
- the order ID,
- the coins, networks and amounts,
- the deposit, receiving and refund addresses, and any memo or tag,
- transaction hashes,
- the order status and times,
- where the visit that led to the swap started: the first page you opened on our site, a referral tag or campaign name from the link you followed, the name of the website that sent you, and whether you used our onion address. This tells us which pages and partners help people. It is not linked to you in any other way.
Anonymous swap statistics. When a swap ends, we also keep a separate record with the pair, the rate type, the outcome, the day, how many minutes it took and, as a percentage, how far the final amount was from the estimate. It has no order ID, amounts or addresses. We use these records to publish completion times on our swap pages.
Browser storage. While you browse, our page keeps the first page of your visit and the referral tag in your browser’s session storage, so they can be added to a swap you start. It is deleted when you close the tab. We do not use cookies for this.
Website analytics. We use Google Analytics to count visits and see which pages people use. It sets first-party cookies and sends page views, device and browser details and an approximate location to Google. It is not loaded on order pages, on the tracking page or on our onion address, so it never sees an order ID. You can block it with a browser setting or extension; swaps work without it.
Support messages. If you write to us, we keep your message and the email address or chat account you used.
Technical data. Our servers use your IP address to deliver pages and to limit abuse. It is not stored in swap records. Abuse limits use a temporary one-way hash that is kept in memory only. Our hosting provider may keep short-lived connection logs for security.
What we do not collect
- Your name, phone number, email (unless you write to us) or ID documents.
- Passwords or accounts. There are none.
- Advertising or remarketing trackers.
- Your IP address in swap records. We do not pass your IP address to our exchange partner.
Why we use it
- To create and run your swap and show its status, which is our contract with you.
- To answer support requests and handle refunds.
- To prevent fraud and abuse and keep the service secure, which is our legitimate interest.
- To meet legal duties, including anti-money-laundering rules and lawful requests.
We do not sell data, and we do not use it for marketing.
Who we share it with
- Our exchange partner. To run a swap, the partner receives the coins, amounts, addresses, memos and transaction details. It uses them to process the swap and for its own legal checks, as an independent controller under its own privacy terms.
- Screening and verification providers. Swaps are screened with sanctions and blockchain analytics tools. If a swap is put on hold, identity checks are done by a verification provider, and your documents go to that provider, not to us.
- Service providers that host our website and our support inbox for us.
- Google, which provides Google Analytics and processes visit statistics under its own terms.
- Authorities, when the law requires it, for example after a valid police request.
The partner and its providers may keep records for longer than we do, for example for at least seven years under anti-money-laundering rules.
Transfers to other countries
Our partner and providers may process data in other countries. When the law requires it, we use appropriate safeguards for these transfers.
How long we keep it
- Swap records: 90 days, then we delete them.
- Support messages: as long as we need them to handle your request and any dispute.
We keep data longer only when the law requires it or while a claim is open. Blockchain transactions are public and permanent, and nobody can delete them.
Cookies and third parties
Google Analytics sets first-party cookies (named _ga) and loads a script from Google on our clearnet pages, except order and tracking pages. We use no other third-party scripts, fonts or images, no advertising cookies, and the site works with JavaScript turned off.
Security
We use encrypted connections, restrict who can access data, and store as little as possible.
Your rights
Depending on where you live, you can ask us to show, correct or delete your data, to limit or stop its use, or to give you a copy. You can also complain to a data protection authority. As there are no accounts, include your order ID so we can find your records. We reply within one month.
Children
HiddenSwap is not for anyone under 18.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
Email contact@hiddenswap.com with any privacy question.