MoneroSwap

We keep nothing on you that we don't absolutely need to — and we've built the site so that we can't.

What we don't do

• No KYC — ever. No identity, no ID upload, no verification, no questions about who you are. We don't check you because we never need to know you.
• No account. No sign-up, no email, no password, no login to use the swap. Ever.
• No cookies, no trackers, no fingerprinting, no ads. We set no cookie and load no analytics script — verify it in your browser's storage panel. Nothing about your visit is measured in your browser at all; the only numbers we keep are the server-side daily totals described below.
• No third-party calls. In production our Content-Security-Policy forbids your browser from connecting to anywhere but this site. Open your browser's Network tab and watch — nothing phones home.
• No server logs. Our web server writes no access logs — your IP is never recorded to disk. The only thing we keep is a set of running totals: how many swaps were quoted and completed, between which pairs, in which broad size range, and the day's combined dollar value (in whole dollars) with our fee on it — counted per day and no finer. They are plain numbers: no addresses, no visitor or session identifiers, and no record of any individual swap. On a quiet day a daily total may of course be a single swap's, but it is a number and nothing more. We also pick hosts on a no-logs policy.
• No database of users or swaps. We don't store your addresses, amounts, or history — we keep no record of your swap at all. The one you keep is the Swap Pass link, which lives in your browser's URL fragment and is never sent to our servers.

What necessarily happens (the honest part)

• A swap has to be executed somewhere. We are the interface; settlement is performed by an underlying third-party swap network that necessarily receives the details needed to move funds — the assets, the amount, and your deposit and destination addresses. We don't add to, sell, or retain that data, but we can't make it invisible to the network that performs the swap.
• Connection metadata. To send you a response, the server necessarily sees your connection (such as your IP) for the moment it serves the request — we just don't write it down. Upstream networks and the host's infrastructure can still observe traffic, which no website can fully prevent. Use our .onion address (or Tor) to remove even that.

Protect yourself

• Use Tor or a trusted VPN to mask your IP from the site and the network.
• Guard your Swap Pass link. It's the only way back to your swap — and anyone who has it can view that swap's status. Treat it like a private receipt.
• Double-check your destination address. Swaps are irreversible.