MoneroSwap
Privacy & warrant canary
We keep nothing on you that we don't absolutely need to — and we've built the site so that we can't.
What we don't do
- No KYC — ever. No identity, no ID upload, no verification, no questions about who you are. We don't check you because we never need to know you.
- No account. No sign-up, no email, no password, no login to use the swap. Ever.
- No cookies, no analytics, no trackers, no fingerprinting, no ads. We set no cookie and load no analytics script — verify it in your browser's storage panel.
- No third-party calls. In production our Content-Security-Policy forbids your browser from connecting to anywhere but this site. Open your browser's Network tab and watch — nothing phones home.
- No server logs. Our web server writes no access logs — your IP is never recorded to disk — and what little the system keeps lives in memory only, wiped on every restart. We also pick hosts on a no-logs policy.
- No database of users or swaps. We don't store your addresses, amounts, or history. The only record of your swap is the Swap Pass link you choose to save — it lives in your browser's URL fragment and is never sent to our servers.
What necessarily happens (the honest part)
- A swap has to be executed somewhere. We are the interface; settlement is performed by an underlying third-party swap network that necessarily receives the details needed to move funds — the assets, the amount, and your deposit and destination addresses. We don't add to, sell, or retain that data, but we can't make it invisible to the network that performs the swap.
- Connection metadata. To send you a response, the server necessarily sees your connection (such as your IP) for the moment it serves the request — we just don't write it down. Upstream networks and the host's infrastructure can still observe traffic, which no website can fully prevent. Use our .onion address (or Tor) to remove even that.
Protect yourself
- Use Tor or a trusted VPN to mask your IP from the site and the network.
- Guard your Swap Pass link. It's the only way back to your swap — and anyone who has it can view that swap's status. Treat it like a private receipt.
- Double-check your destination address. Swaps are irreversible.
Warrant canary
As of 2 June 2026:
- We have received no government or law-enforcement request for user data.
- We have received no subpoena, court order, or national-security request.
- We have not been subject to any gag order or secret demand.
- We have not been asked to modify, backdoor, or weaken this service.
- We have never disclosed user data to any third party — we hold none to disclose.
This notice is reviewed periodically. If it disappears, stops being updated, or this language changes, treat it as a warning. Cryptographically signed versions to follow.