Privacy policy

Last updated 10 November 2026

Effective 10 November 2026.

In short: no account, no KYC and no email. We keep only what we need to run your swap and help you if something goes wrong, and we delete it on a fixed schedule.

What we don't collect

• No account, sign-up, name, email, phone number or ID documents.
• No tracking cookies, no analytics, no ad networks and no third-party scripts or fonts on our pages.
• No IP address, and no hash of it, is stored with your swap.

What we store and why

For each swap we store:

• the swap ID, the coins and networks, the amounts, the quoted rate and the timestamps
• the payout address and the optional refund address you give us
• the deposit address we gave you, and the transaction IDs of your deposit, our payout and any refund
• the swap's status history

We need these to match your deposit, send your coins, process refunds and answer support questions. Anyone with your swap ID can open its tracking page, which shows these addresses and transaction IDs. Keep the ID private.

To stop abuse, we count requests per IP address. The counter is filed under a keyed hash that uses a secret that changes every day, so it can't be turned back into your IP address or linked across days. The counters are deleted after 2 days.

Our web server keeps standard access logs: IP address, time, page or API request (which can include your swap ID) and browser type. They're used for security and troubleshooting.

How long we keep it

• Swap records: addresses, transaction IDs and status notes are removed 30 days after a swap is finished, refunded, closed or expired, and the remaining record (coins, amounts, dates) is deleted after 90 days. Swaps that are still open, under review or waiting for a refund are kept until they're resolved. A record that our payout ledger still needs for reconciliation is kept until it no longer does.
• Payout ledger: our payout wallet keeps its own record of each payout sent (address, amount, transaction ID) so we can reconcile and prove payments.
• Quotes: deleted after about 1 hour.
• Web server access logs: archived monthly, and the previous month's archive is deleted at the end of each month, so they're kept for up to about 2 months.
• Internal app logs: deleted after 14 days. They hold swap IDs and processing events, not your IP address, and our exchange call log records only which call was made and whether it worked.
• Notification sign-ups: deleted 7 days after the swap ends or after you stop alerts (see below).

Third parties

• Hosting and network providers. Our site runs on a hosting provider and is delivered through a network and security provider (CDN). They process your IP address and the requests you make, as every website's providers do, under their own policies.
• Liquidity providers. We trade on exchange liquidity providers to fill your swap. They see our trades and the deposits and withdrawals on our accounts. For some coins you send your deposit directly to an address held at a liquidity provider. We don't send them your name, email, IP address or payout address.
• Blockchain networks. Deposits, payouts and refunds are public blockchain transactions. To check and send them we use our own nodes and, for some coins, public network servers. Those servers see our queries, not your IP address.
• Telegram and Vector (only if you opt in). If you turn on swap alerts, we store your Telegram chat ID or your Vector (Nostr) public key, linked to that swap ID, so we can send status updates. Telegram, and the Nostr relays that carry Vector messages, handle those messages under their own policies. This data is deleted 7 days after the swap ends or after you stop alerts.
• Block explorers. Transaction links open third-party block explorer sites, and only if you click them.

We don't sell or share your data for marketing. We may share it if the law requires us to.

Cookies and local storage

We set no cookies on public pages. Our network provider may set a strictly necessary security cookie if it needs to check a visitor for abuse. Your browser's local storage keeps your language choice and the ID of your last swap, so the tracking page can fill it in. The last swap ID is cleared after 24 hours or when the swap finishes. Clear your browser's site data to remove both at any time.

Tor

You can use SwapDusk through our Tor mirror: duskvjsvrpcpznjpjuaxgpnitb42i5no5vc2oib7esui3m66qeaik4qd.onion. Tor Browser offers it automatically when you visit this site. On the mirror, our servers don't see your IP address, and the mirror itself keeps no access log. Swap data is stored the same way as on the regular site.

Your choices

• Leave out the refund address if you prefer. We'll then need your swap ID to arrange a refund.
• Use a fresh payout address for each swap.
• Use the Tor mirror.
• Alerts are optional. Stop them at any time from the tracking page or the stop link in any alert.
• Ask us to delete a finished swap's details sooner. Contact support with the swap ID. We may keep what we need for open disputes, fraud prevention or legal obligations.

Contact

Support via Telegram: t.me/Guapic. Please include your swap ID.

Changes

If we change this policy, we'll update it on this page and change the "Last updated" date.