Privacy Policy

1. Information We Collect

We collect minimal data necessary to operate the service:

2. What We Do NOT Collect

We do not use any analytics, tracking, or advertising services. There is no Google Analytics, no Facebook Pixel, no fingerprinting, and no behavioral profiling. We do not collect personal information such as names, email addresses, or payment details through the website.

3. Third‑Party Services

We integrate with the following third-party services, each of which has its own privacy policy:

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), our legal bases for processing data are:

• Legitimate interest — Rate limiting to protect our service from abuse (IP address processing)
• Strictly necessary — Functional cookies (language, theme) are required for the website to operate as expected and are exempt from consent under the ePrivacy Directive
• Consent — Your browser preferences stored in local storage are never transmitted to our servers. The Nanswap swap widget is loaded only after your explicit consent

5. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access — Request information about data we process about you
• Rectification — Request correction of inaccurate data we hold about you
• Erasure — Request deletion of any data we hold about you
• Restriction — Request that we limit how we process your data
• Portability — Receive your data in a portable format
• Objection — Object to data processing based on legitimate interest
• Withdraw consent — You may withdraw consent at any time by clearing your browser cookies and local storage

Since we collect minimal data (ephemeral IP processing and browser-side preferences), most of these rights are satisfied by default. You can clear all locally stored preferences at any time through your browser settings.

6. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

In France, the supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés).

You may also contact your local data protection authority if you are located in another EU/EEA country.

7. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, as required by GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.

8. International Data Transfers

Our website is hosted by Vercel Inc. (United States). Server-side API calls are made to CoinGecko (global CDN). These transfers are conducted in accordance with applicable data protection regulations, including the EU–US Data Privacy Framework where applicable. We only transfer data that is strictly necessary for the operation of the service (ephemeral IP addresses for rate limiting). No personal data is stored outside the EU beyond transient server processing.

9. Data Retention

IP rate-limiting data: Automatically purged every 5 minutes from server memory. Local storage data: Persists in your browser until you clear it. We do not maintain any user database or persistent data storage.

10. Children's Privacy

Our service is not directed at children under 16. We do not knowingly collect any information from children. If you believe we have inadvertently collected data about a child under 16, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the site after changes constitutes acceptance.

12. Contact

For privacy-related inquiries, contact us at: