Data requests

What an exchange order stores

For each order: the deposit and payout addresses, the assets and chains, the amounts, the transaction hashes, timestamps, the order's status history, and, only if the customer chose notifications, the contact they gave for them. That is the complete record.

What we do not have

• No name and no identity documents.
• No IP address and no browser fingerprint in an order record.
• No device identifier and no location.
• No account behind a swap — swapping does not create one.
• No bank details and no card numbers: an exchange pays out in cryptocurrency only.

Signing in to an optional account creates its own session-security record (the sign-in IP and a hash of the browser type); an anonymous exchange creates none.

A legal order can only return what a system holds. Ours holds the first list in full and nothing from the second, because you cannot hand over what you never collected.

How we answer

We answer valid, specific legal orders with the records they cover and nothing broader, as the Privacy Policy states. A request without legal force is weighed case by case, and no is our default when the law does not say yes. Where the order itself does not lawfully forbid it, we tell the affected customer; where notice must wait, it waits — delayed, not cancelled.

What we will not build

We do not run a warrant canary and will not imitate one: a signal we could be forced to falsify is worse than no signal. If our answer to any section of this page changes, the page changes, with a new date at the top.