What we do not keep

This page is mostly a list of things this site does not have, which is unusual for a privacy policy and is the point.

Your IP address is not stored

Not against your order, and not in the web server log. The log line for this domain is written with the address replaced by 0.0.0.0 before it reaches disk. That is a configuration on the server rather than a promise on a page, and it applies to every request to this domain including this one.

Your browser is not fingerprinted

The user agent string is not recorded against orders. There is no analytics script, no advertising pixel, no social widget, no font loaded from a third party, and no cookie set for visitors. Nothing on this site tries to recognise you on a second visit.

Your referring page is not recorded

Where you arrived from is discarded. If you got here from a forum thread you would rather not be associated with, that association is not made here.

What is unavoidably kept

Three things. The email address you type, because that is where the redemption link goes. The order record itself: plan, price, coin, deposit address, amounts, and the swap reference, without which no payment could be reconciled. And a two-letter country code, which comes free from the network layer and is coarse enough that it identifies nobody.

What the swap provider sees

The coins, the amounts and the addresses, because it executes the exchange. It does not receive your email. This site cannot make promises on its behalf, and neither should anyone else.

What Monero changes

Paying in XMR means the deposit itself carries no public transaction graph back to you. Combined with the above, an order here leaves about as little trace as buying a subscription can. It is not magic: your email address is still an email address, and your own wallet is still your own wallet.

Retention and removal

Order records persist so order codes keep working. Ask from the order's email address and the record is deleted by hand, after which nobody can help you with that order.