Privacy Policy

1. Overview

c2swap is designed to respect your privacy. We do not require you to create an account, verify your identity, or connect a wallet to use the Service. This Privacy Policy explains what limited data we collect, why, and how we handle it.

2. Information We Do NOT Collect

We do not collect, store, or process:

• Names, email addresses, or any identity information;
• Government-issued identification documents;
• Wallet private keys or seed phrases;
• Account credentials (there are no accounts);
• Cookies or cross-site tracking identifiers.

3. Information Collected Automatically

When you use the Service, our servers may automatically collect:

3.1 Server Logs

Our web server generates standard access logs that include IP addresses, HTTP request method and path, response status code, response size, timestamp, and User-Agent string. These logs are retained for up to 30 days and are used solely for security monitoring, rate-limiting, and debugging purposes.

3.2 Rate-Limiting Data

To protect the Service from abuse, we maintain in-memory rate-limit counters keyed by IP address. This data is ephemeral, held only in server memory, and is not persisted to any database or log file.

4. Cryptocurrency Addresses

When you initiate a swap, you provide a payout wallet address. This address is transmitted to our Exchange Partner for the sole purpose of completing the swap. We do not store wallet addresses in any database or associate them with your IP address or any other identifier beyond the duration of the swap request.

5. Third-Party Exchange Partners

Swaps are executed by third-party Exchange Partners. When a swap is initiated, certain transaction data (currency pair, amounts, payout address) is shared with the relevant Exchange Partner as required to fulfil the swap. Exchange Partners operate under their own privacy policies, which may include AML/KYC data collection for transactions above applicable thresholds. We are not responsible for the data practices of Exchange Partners.

6. Use of Data

We use the limited data described above only to:

• Operate and secure the Service;
• Detect and prevent fraud, abuse, or illegal activity;
• Comply with applicable legal obligations;
• Diagnose and resolve technical issues.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your data. We may disclose data when required to do so by law, court order, or regulatory authority, or when necessary to protect the rights, property, or safety of c2swap, its users, or the public.

8. Data Security

We implement reasonable technical and organisational measures to protect the limited data we handle. However, no internet transmission or storage system is 100% secure. Use of the Service is at your own risk.

9. International Users

The Service is operated internationally. By using the Service, you acknowledge that your data (limited to server logs as described) may be processed in jurisdictions outside your country of residence, which may have different data protection laws.

10. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a minor, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of the Service after an update constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, please contact us at support@c2swap.com.