GalaxySwap

プライバシーポリシー

There are no accounts

GalaxySwap has no sign-up, no login and no user profile. We do not ask for your name, email address or phone number, and there is nothing to delete an account from. You use the interface by connecting a wallet, and disconnecting ends that.

What our server receives

The interface talks to our own backend, which fetches quotes, pool data and balances on your behalf so that provider API keys never reach your browser. To do that it necessarily receives:

  • Your wallet address, when a page needs your balances or your liquidity positions.
  • What you are looking at — the chain, the token pair or the pool in the request.
  • Standard request data your browser sends to any server, including your IP address, which is also what per-IP rate limiting counts against.

Receiving something is not the same as keeping it. Our server needs your address to answer the request, but it is removed before anything is written to a log — request logs record the path and the parameters, with the wallet address and any transaction hash replaced by the word redacted. So our logs record that somebody asked for balances on a chain, not who.

Those logs are not kept for long. They are written to the server’s standard output and retained by our hosting provider for seven days so that we can investigate errors, and then they are gone. We do not forward them to any log-collection or error-tracking service, and we keep no copy of our own.

What stays in your browser

Some things never leave your device. Your transaction history in this interface, and your slippage preference, are stored in your browser’s local storage — not on our servers. Clearing your browser data removes them, and they do not follow you to another device.

A cookie records your language choice so the site opens in the same language next time. It is not used for tracking or advertising.

Who else sees your requests

Some requests reach third parties, either through our backend or directly from your browser: LI.FI for swap and bridge routing, blockchain RPC providers for reading on-chain state, and WalletConnect if you connect through it. Each has its own privacy policy and its own handling of what it receives. Public blockchains themselves are permanent and public by design — any transaction you sign is visible to everyone, forever, and that is outside anyone’s control including ours.

No analytics or advertising

As of today there is no analytics, no error-tracking service and no advertising or third-party tracking code in this interface. If that changes, this page changes with it before the code ships.

Your rights, and how to reach us

Whichever privacy law applies where you live, the rights below are offered to everyone who uses this interface. We do not ask you to prove which regime you fall under before answering.

In practice there is very little to exercise a right over, and that is the design rather than an accident: there are no accounts, wallet addresses are removed before anything is written to a log, and nothing is passed to an analytics or advertising service. You can still ask us what personal data we hold about you and how it has been used, and ask us to correct it if it is wrong. We will answer within a reasonable time.

Write to galaxyswap.app@gmail.com for anything on this page — a privacy question, an access or correction request, or to tell us something here is inaccurate.