What we do not log, specifically

Most privacy pages are a list of promises. This one is a list of fields, because a claim you can check is worth more than one you cannot.

Not stored against your order

Your IP address, your browser's user agent string, and the page you arrived from. Every other site we run records those three for fraud review. This one does not, and the difference is a setting on the site row that the checkout code reads before it writes anything.

The web server is configured separately to write 0.0.0.0 in place of the real address for this hostname, so the absence holds in the access log too, not only in the database. That matters, because an access log is the place people forget.

What is stored

The plan you bought, the price, the coin, the deposit address issued to you, the amount, the transaction that settled it, and your email. All of it is needed either to fulfil the order or to answer you when you ask what happened to it.

Country is kept as a two letter code. It comes free from the network edge, it cannot identify anyone on its own, and it answers the only geographic question we actually have, which is roughly where orders come from.

What we could not give up if asked

Not a claim about our willingness, a statement about what exists. There is no IP to hand over because none was written. There is no browsing history because there is no account and no tracking. What exists is one row per order, and you can see most of what is in it on your own order page.

Third parties

The swap provider sees the transaction, as it must to perform it. The network edge sees the request in order to route it. Neither of those is something we can promise away, and any site telling you otherwise is describing an architecture that does not exist.

Verifying it

Place a small order and ask us what we hold against it. We will read the row back to you. The fields above will be empty.