DEXchange ← Back to Home
Legal

Privacy Policy

Last updated: April 2, 2026

1. Our Approach to Privacy

DEXchange is built on the principle of minimal data collection. We believe that the best way to protect your privacy is to not collect your data in the first place. Our Service is designed to function without requiring personal information, accounts, or identity verification.

2. Information We Do Not Collect

DEXchange does not collect, store, or process any of the following: names, email addresses, phone numbers, government-issued identification, physical addresses, social security numbers, financial account details, or any other personally identifiable information.

We do not require account creation. We do not use cookies for tracking or identification purposes. We do not build user profiles or track individual users across sessions.

3. Information That May Be Collected

When you use the Service, the following technical information may be processed in the course of delivering the service:

Transaction data: When you initiate an exchange, the transaction details (currency pair, amount, destination address) are transmitted to our third-party exchange provider to execute the swap. This data is necessary to fulfill the transaction and is processed by the exchange provider under their own privacy policy.

Server logs: Our hosting infrastructure may automatically record standard server access logs, which can include IP addresses, browser type, and request timestamps. These logs are used solely for security monitoring, abuse prevention, and infrastructure maintenance. They are not used for user identification or tracking.

Cloudflare: Our Service uses Cloudflare for hosting and security. Cloudflare may collect certain technical data as described in their privacy policy. We do not control or have access to data collected by Cloudflare beyond what is necessary to operate the Service.

4. Third-Party Exchange Provider

Decide whether to name ChangeNOW explicitly and link to their privacy policy, or keep it generic. Naming them adds transparency but ties you to them if you switch providers later.

Exchange transactions are processed by third-party infrastructure. When you initiate a swap, the following data is shared with the exchange provider: the source currency and amount, the destination currency, and your destination wallet address. This information is the minimum required to execute the exchange. The exchange provider operates under their own privacy policy, which governs their handling of transaction data.

5. Blockchain Data

Cryptocurrency transactions are recorded on public blockchains. Wallet addresses and transaction amounts are publicly visible on the blockchain by design. DEXchange has no ability to modify, delete, or restrict access to blockchain data. Users should be aware that blockchain transactions are permanent and publicly accessible.

6. Analytics

Decide whether you'll use analytics (e.g., Cloudflare Web Analytics, Plausible, or none). Update this section with the specific tool and what it collects, or remove entirely if no analytics.

We may use privacy-respecting analytics tools to understand aggregate usage patterns such as page views and general geographic regions of visitors. If analytics are employed, they will not use cookies, will not track individual users, and will not collect personally identifiable information. This policy will be updated to reflect any analytics tools in use.

7. Data Security

We implement appropriate technical and organizational measures to protect the limited data that passes through our systems. All connections to the Service are encrypted via HTTPS/TLS. API communications are proxied through secure infrastructure to prevent exposure of sensitive configuration data.

8. Data Retention

Because we do not collect personal information, there is no personal data to retain. Server logs, if generated, are retained only for the minimum period necessary for security and operational purposes and are automatically purged.

9. Your Rights

Once you decide on jurisdiction, you may need to add specific GDPR (EU), CCPA (California), or other regional privacy rights language. A lawyer should review based on your target markets.

Because we do not collect or store personal information, traditional data rights (access, correction, deletion) are not applicable in most cases. If you believe we hold any information about you and wish to exercise your rights under applicable data protection laws, please contact us through the channels listed on our website.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

Add actual contact information — email address or support channel.

For questions regarding this Privacy Policy, please contact us through the channels listed on our website.