Privacy Policy
Last updated: January 2026. We built this platform so we would never need to know who you are. This policy explains exactly what that means in practice.
1. Our Commitment to Your Privacy
Exchs Finance was designed from day one around a single architectural principle: collect as little data as humanly possible, and retain it for as short a time as feasible. This is not a marketing statement — it is a structural choice reflected in every part of how this platform works. We cannot expose, share, or be compelled to hand over data that we never collected in the first place.
This Privacy Policy describes in precise terms what technical data we do collect to process your exchange, what we do not collect under any circumstances, how collected data is handled, and what third-party services touch your information and why.
2. Data We Never Collect
The following categories of data are never collected, stored, processed, or transmitted by Exchs Finance at any point:
- Your full name, first name, or any name identifier
- Email address or any contact information
- Phone number
- Government-issued identity documents (passport, national ID, driver's licence)
- Facial recognition data, selfies, or biometric identifiers of any kind
- Home address, postal code, or country of residence
- Persistent user profiles, accounts, or login credentials
- Cross-session tracking data or device fingerprints
- Advertising identifiers or third-party analytics cookies
- Social media profiles or linked external accounts
3. Data We Do Collect to Process Your Swap
To execute a cryptocurrency exchange on your behalf, we temporarily store the following technical data in your active PHP session:
- Deposit address: A unique, one-time address generated for your order to receive your incoming funds.
- Destination wallet address: The wallet address you provided where converted funds are sent after the swap completes.
- Currency pair and amount: The two cryptocurrencies involved in your swap and the transaction amount.
- Order timestamp: The date and time the order was created, used for rate-locking logic and order expiry.
- Order ID: A randomly generated alphanumeric identifier (e.g. ORD-A3F7B2C1) used to track the status of your swap.
This data exists exclusively in your session for the operational duration of your exchange. It is not linked to any persistent user identity, account, or external profile. It cannot be connected back to you as an individual by anyone — including us.
4. Server Logs
Our web servers generate standard access logs that typically include IP addresses, HTTP request paths, timestamps, and user agent strings. These logs are generated automatically by server infrastructure and are used solely for operational purposes — diagnosing errors, preventing abuse, and monitoring platform health. They are not processed for user profiling, not shared with third parties, and are deleted on a rolling basis as soon as operationally practical.
If network-level anonymity is important to you, we recommend using a VPN or the Tor network when accessing our service. Both are fully compatible with Exchs Finance.
5. Third-Party Services
We use a small number of third-party services to operate the platform. Below is a full disclosure of each:
- KuCoin API: Used to fetch live cryptocurrency exchange rates in real time. No personal data, wallet addresses, or order information is transmitted to KuCoin through this integration.
- QR Server (api.qrserver.com): Used to generate QR code images for deposit addresses displayed on your order page. The deposit address string is sent to this service solely for QR code image generation. No other data is included in this request.
- Google Fonts: Used to serve web typography. Standard font resource requests are made to Google's content delivery network when you load pages on our site.
We do not use Google Analytics, Facebook Pixel, Hotjar, Mixpanel, or any other behavioural analytics or advertising technology.
6. Cookies
We use exactly one cookie: the PHP session cookie. This cookie is a standard server-side session identifier that allows your browser to maintain the state of your active order (so you can navigate between the order creation and order status pages without losing your swap details). It contains no personal information whatsoever. It expires automatically when you close your browser tab or window.
We do not use advertising cookies, tracking pixels, retargeting cookies, analytics cookies, or any persistent cookies of any kind.
7. Data Retention
Order session data is stored only for the duration of your active browser session. When your session ends — either because you close the browser, the session times out, or the order completes — the session data is no longer accessible. We do not maintain a long-term database of completed orders linked to any user identity. There is no archive of your transaction history on our systems.
8. Data Sharing and Disclosure
We do not sell your data. We do not rent your data. We do not share your data with third parties for marketing, advertising, analytics, or commercial purposes of any kind.
In the event we receive a legally valid order, subpoena, or other compulsory legal process requiring disclosure of information, we will comply to the extent legally required. However, given the minimal data we collect and the session-based (non-persistent) nature of order data, any such disclosure would be extremely limited in scope. By design, we simply do not have the kind of comprehensive user data that most exchanges retain.
9. Security Measures
All connections to Exchs Finance are encrypted via HTTPS/TLS. Every order uses a freshly generated, unique deposit address — there is no reuse of addresses across orders or users. We do not store private keys or sensitive cryptographic material in our database. Session data is isolated per-user by the PHP session management layer.
10. Minors
Our Service is intended exclusively for individuals aged 18 and over. We do not knowingly collect any information from persons under the age of 18. If you are under 18, please do not use this Service.
11. Policy Updates
We may update this Privacy Policy periodically as our service evolves or legal requirements change. All updates will be posted on this page with a revised effective date. Your continued use of the Service following any update constitutes your acceptance of the revised policy.
12. Contact
For any privacy-related questions, concerns, or requests, please contact us at support@exchs.finance.