Privacy Policy

1. No accounts, no tracking

SwapXMR has no user accounts and uses no analytics, advertising or tracking cookies.

2. What we process

Server logs: when you visit the site or call the API, our hosting provider processes technical data such as IP address, user agent, requested URL and time, to deliver the site and protect it against abuse.

The site has no forms, accounts or payment features, so we do not collect any other personal data. When you follow a link to another website, that website's own privacy policy applies.

3. Legal basis and retention

We rely on our legitimate interest in running a secure, working service (Art. 6(1)(f) GDPR). Logs are kept only as long as the hosting provider's standard log retention. [TODO: confirm Vercel log retention for this project.]

4. Service providers

Vercel Inc. (hosting, USA). Transfers outside the EEA rely on the EU-US Data Privacy Framework or standard contractual clauses.

5. Your rights

You have the right to access, rectify, erase, restrict or object to processing. Contact TODO-contact@swapxmr.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).