Privacy Policy

PLACEHOLDER: requires legal review. This text was written as a structural placeholder and is not legal advice. Replace it with text approved by a lawyer before any public launch.

What we keep

For each swap: the assets, the amounts, the addresses, the transaction IDs and its status. We keep no accounts and never ask for your name or an email address. Swap records are kept for now; a period after which they are deleted will be set once the service has been tested.

The site sets two cookies: a random user ID, which keeps your support conversations and ties together the swaps this browser starts (for support, and to count what our campaign links bring), and the campaign code of a link you arrived from. If you write to support, we keep the conversation. If you turn on browser notifications for a swap, we keep your browser's push address for that swap.

Your list of swaps stays in your own browser. Your browser remembers your addresses only if you ask it to, each for 30 days after its last use: your Monero addresses, so you can pick them again, and a fingerprint of every other address your swaps use, so it can warn you before you use one again. A fingerprint is not the address, but anyone holding your browser can check it against an address they already know. Clearing your list of swaps removes the fingerprints.

Your IP address

This website's server passes your requests on to our service through Tor. It sees your IP address only to serve the pages and to limit how many requests each visitor makes, which it counts in its memory under a key it replaces every hour. It never stores, logs or passes on your IP address, and our service never receives it. In Tor Browser you can use our onion site instead. Error reports from your browser carry neither your IP address nor your browser's user agent.

What others can see

Chainflip publicly records each swap's deposit, receiving and refund addresses, the amounts, and that the swap came through our broker. On Bitcoin, Ethereum, Solana and Tron every payment is public; only Monero hides the sender, the receiver and the amount. Our XMR desk and our CoinJoin wallet see both sides of the orders they handle, and a CoinJoin does not hide your coins from us.

The push service of your browser's maker learns when a notification about your swap arrives. A block explorer sees the IP address of whoever opens it, next to the transaction they look up, so your swap's page shows transaction IDs to copy rather than links. Apart from the swap networks that run your swaps, we send your data to no one: we use no analytics, advertising or chat services.

Why

To run and track your swaps, answer your questions, see which links bring visitors, prevent abuse and meet legal obligations.

Your choices

Anyone with a swap's ID can follow it, so keep the ID private. You can turn notifications off at any time, clear your list of swaps, have your browser forget everything this site keeps in it (on the Activity page), and clear this site's cookies (your support conversations can then no longer be opened).