Privacy policy

Most privacy policies describe how much data a service collects. This one mostly describes
what it does not.

What we never ask for

No name. No email address to swap. No phone number. No identity document. No proof of
address. There is no account, so there is no profile to build.

IP addresses are not stored

Your IP address is used in memory, for the length of your request, to rate-limit abuse and
block attacks. It is then converted to an irreversible token — the value that reaches
our rate limiter cannot be turned back into your address by us or by anyone who obtains it.

Your raw IP address is never written to a database, an application log or a backup. There
is no access log of IP addresses to hand over, because there is no such log.

What we do keep

Only what an order cannot work without:

• The pair and amounts being swapped
• The deposit, receiving and refund addresses you supplied
• Transaction hashes for the deposit and the payout
• The order's status history and timestamps
• Any messages you send through an order's support thread

Every address and hash in that list is already public on a blockchain. What we hold is the
link between them for your order — not information about you.

Why we keep it

To execute your swap, to show you its status, to answer your support messages, to refund
you if it fails, and to meet the record-keeping obligations that apply to us. Nothing in
that list is used for advertising or profiling, and there is nothing to sell.

Who else sees it

Liquidity providers receive the details needed to execute your specific swap — the
pair, the amount, and the address to deliver to. They do not receive anything about you,
because we have nothing about you to send.

Nobody else, except where we are legally compelled, or where an address matches
sanctions or known-fraud screening (see our AML policy).

We do not sell data. We do not run advertising trackers or third-party analytics on this
site.

Cookies

Only what the site needs to function — keeping your session coherent and protecting forms
against cross-site request forgery. No advertising or cross-site tracking cookies.

Retention

Order records are kept while the order is live and afterwards for the period our
record-keeping obligations require, then deleted. Support messages are kept with the order
they belong to.

Your rights

Depending on where you live you may have rights to access, correct or erase personal data
held about you. In practice we usually hold none — you are welcome to ask, and an order
reference is the only way we can locate anything at all. Write to contact@kryptfi.com.

Changes

Updates are published on this page and take effect on publication.