Privacy notice

The Interface has no sign-up, no login, no password and no user record. We do not request or knowingly collect your name, postal address, email address, phone number, date of birth, government identifiers, biometric data or any other information that directly identifies you. We never ask for, and will never ask for, a private key or seed phrase.

• Wallet address. When you connect a wallet, your public address is processed in your browser so the Interface can read balances and allowances and compose a transaction, and it is sent to our servers as part of quote and swap requests so a transaction can be built for that address. A wallet address is pseudonymous, not anonymous — see §3.
• Trade parameters. The chain, token pair, amount and slippage tolerance you enter are sent to our routing service so it can answer.
• Technical request data. Like any web service, our servers and our infrastructure providers log IP address, approximate location derived from it, user agent, referring page, timestamps, and which endpoint was called. This is used for serving the request, security, abuse prevention, rate limiting, sanctions and jurisdiction screening, debugging and capacity planning.
• Aggregate usage. Counts and volumes used to operate and improve the service and to report on it in aggregate.
• Page analytics. Which pages are opened, and the referring site, are counted by a cookieless analytics provider so we can see what is used. No cookie, no device storage, no fingerprint, no cross-site identifier — and deliberately nothing about the trade: not the pair, not the amount, not your address.
• Local preferences. Theme, typeface, layout mode, selected chain, slippage and route-view choices are stored in your browser’s localStorage and never leave your device. Clearing site data removes them.

We do not use advertising cookies, cross-site trackers or advertising identifiers, and we do not sell, rent or share your data with anyone for advertising or for their own marketing purposes.

Public blockchains are public, permanent and outside our control. Every transaction you sign — the address, the assets, the amounts, the time, the counterparties and the entire history of that address — is recorded on a public ledger that anyone in the world can read, copy, index and keep forever. Neither you nor we can delete, amend or restrict it.

Wallet addresses are pseudonymous rather than anonymous. Chain-analysis firms, exchanges, block explorers, sanctions screeners and ordinary members of the public routinely link addresses to real identities using on-chain patterns and off-chain information. Connecting a wallet, using a centralised exchange, or reusing an address can make that link trivial. Assume that anything you do on-chain may eventually be attributed to you.

We process the data in §2 to provide the Interface you asked for (performance of a contract or the steps you requested), and for our legitimate interests in operating, securing and improving it, preventing fraud and abuse, and enforcing our Terms. Where we screen for sanctions or restricted jurisdictions, we do so to comply with legal obligations and to protect our own position. We do not use your data for automated decision-making that produces legal effects for you, beyond blocking access where screening requires it.

Using the Interface means talking to other people’s computers. The following see some of the data described above, under their own privacy policies, which you should read:

• Hosting, CDN and DNS providers that serve the Interface and its APIs, and receive request logs including your IP address.
• Blockchain node and RPC providers, which see the read and broadcast requests made for your address. Requests from your browser are proxied through our servers, so those providers generally see our IP rather than yours — but the address and calls are visible to them.
• The Exen routing service, which receives the trade parameters and address in order to compute a route and build a transaction.
• Token metadata and price services, and market-data providers used for charts, statistics and recent trades.
• A privacy-preserving web-analytics provider (Vercel Web Analytics), which records page views and referrers. It sets no cookies, stores nothing on your device, does not fingerprint you and cannot follow you to other sites — and it never receives your wallet address or any trade parameter.
• Your wallet provider and any browser extension you use, which sees far more than we do and is governed entirely by its own policy.
• Liquidity venues and market makers, including request-for-quote counterparties, which receive the parameters needed to price and fill your trade.
• Professional advisers, and law-enforcement or regulatory authorities where we are legally required to disclose.

Some of these are located outside your country, so data may be transferred internationally, including to jurisdictions with different data-protection standards. Where such transfers are subject to law that requires safeguards, we rely on the appropriate mechanism available to us.

Technical logs are retained only as long as needed for the purposes in §4 — ordinarily a short period for operational logs, longer where required for security investigations or by law. Aggregate and anonymised statistics, which cannot identify you, may be retained indefinitely. On-chain data is not ours to retain or delete; it is permanent by design.

The single most important protection is on your side: your wallet and its keys are held by you, are never transmitted to us, and cannot be obtained from us by an attacker because we do not have them.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to complain to your local supervisory authority. Contact us at admin@wraxyn.io and we will respond as required by applicable law.

Two practical limits. First, because we hold no account and no identity, we usually cannot connect a request to any record about you, and we may be unable to verify who you are — in which case we may not be able to act on the request. Second, we cannot delete, rectify or restrict anything recorded on a public blockchain; no one can.

The Interface is not directed to anyone under 18 and we do not knowingly process their data. If you believe a child has provided personal data to us, contact us and we will delete what we hold.

We may update this notice at any time by publishing a new version at this address, which takes effect when published. The date at the top shows the current version. Questions, or a request under §8: admin@wraxyn.io.