Privacy

You do not create a StealthSwap login and you do not connect a browser wallet to request a quote. On the website there is no account at all: a random session identifier kept in your browser is the only thing linking you to your own orders, and it is described further down.

You do need a Telegram account to use the bot, and Telegram processes your account and message data under its own policies. Telegram may provide the bot with your Telegram ID, username, display name, and language information.

Depending on how you use the service, we may handle:

• Telegram ID, username, display name, language, and bot or campaign start source.
• The website session identifier described below, for visitors who use the site rather than the bot.
• A campaign label from a tagged website link, if you later request a swap quote.
• Terms-acceptance version and eligibility-confirmation timestamps, plus the disclosures accepted for a card order or an escrow deal.
• Selected assets and networks, amounts, quote details, rate type, markup, and timestamps.
• Receiving, refund, and deposit addresses, plus any required public memo or tag.
• Trade and route identifiers, partner route, order status, transaction details, and route responses.
• The email address you give for a prepaid card order, handled as described below.
• Escrow deal records: the wallet addresses of both parties, the deal terms and their hash, bonds, deadlines, state changes, evidence submitted in a dispute, and rulings, linked to the account that created or accepted the deal.
• Free Roll records: rolls, prizes, and the seeds and roll numbers kept so a roll can be rechecked later.
• A rating and any review text you choose to send after a swap, which may be published as described below.
• Support messages, public trade references, and internal notes needed to investigate an issue.
• Security, audit, and operational records used to prevent abuse and run the service.

StealthSwap never needs your seed phrase, recovery words, private keys, wallet password, Telegram login code, or 2FA code. Do not provide them to us or anyone else. We do not ask you to connect a wallet to the website or bot.

A third-party route may separately require identity or source-of-funds verification under its own rules. Do not send identity documents in an ordinary Telegram chat or to an unsolicited account. Review the route's privacy terms and use only a verified process tied to the order.

We use the information above to calculate and present quotes, create and track orders, deliver status messages, investigate failed or delayed swaps, answer support requests, enforce limits, measure campaign and service performance, prevent abuse, maintain records, and comply with applicable legal obligations.

A prepaid card order needs one email address, because the redeem code is delivered by email and nowhere else. The full address is passed to our card issuing partner exactly once, so that they can send you the code, and it is not kept here in full. What stays on the order record is a masked form, the first character and the domain, which is enough for support to answer whether the address was a typo and is not itself an address.

Our card issuing partner holds the full address under its own terms and privacy practices, and it is the party that emails you. The masked form is kept with the order record for as long as we keep order records, which the retention section below describes. We do not use a card order email for marketing.

An escrow deal records the wallet addresses of both parties, the deal terms and their hash, the bonds, deadlines, state changes, any evidence submitted in a dispute, and any ruling. Those records are linked to the account that created or accepted the deal, which in the bot means a Telegram account. An invite to a deal is stored only as a hash of the invite code.

Escrow activity on chain is permanent and public. Addresses, amounts, timings, and outcomes can be read by anyone, today and years from now, including your counterparty and any analytics firm that cares to look. We cannot erase or make private anything written to a chain, so escrow is pseudonymous rather than anonymous.

Published rulings are redacted before they go up: they carry no address, no handle, no exact amount, and no free text either party wrote. The chain underneath a ruling is still public. Where a request to open a deal is refused, we keep the refusal with coarse signal counts only and never store the free text you typed.

After a swap you may be asked for a rating and, if you want, a few words. The rating is kept with the order. Review text you send may be published in our public reviews channel and on the reviews page, tied to that swap's public trade reference so a reader can see it belongs to a real swap.

Publication is public and can be copied by anyone, so do not put anything in a review that you would not want republished. Sending text is optional, and skipping it changes nothing about your order.

To request or complete a swap, we send the necessary order data to an aggregation or liquidity route. This can include the selected assets and networks, amounts, destination and refund details, order identifiers, and transaction information. Those third parties process data under their own terms and privacy practices and may have different retention or verification requirements.

For a card order we also send our card issuing partner the order details and the email address the redeem code has to reach. We rely on Telegram and on infrastructure providers such as hosting, database, blockchain node, and security services to run the product. We may disclose information where reasonably necessary to protect users and the service, respond to lawful process, or enforce our terms. We do not sell personal data.

Blockchain addresses, amounts, transaction hashes, timing, and related activity may be permanently visible on public networks. We cannot erase or make private information written to a blockchain. A swap or an escrow deal should not be treated as anonymous merely because no separate StealthSwap login is required.

The website stores one functional identifier in your browser. It is a random value with no name, email, or address inside it, and it exists so the site can show you your own orders when there is no account to log in to. It is written to both browser storage and a cookie that lasts a year, because a browser or a clear site data action can wipe one and leave the other, and losing it would lose your link to an order that may already hold your money. Your IP address is deliberately not used for that purpose, because thousands of unrelated people can share one address.

If you arrive through a link with a campaign label, the website may store the first valid label in your browser and use it for up to 30 days. When you request a swap quote, that label is sent to our service to help measure which campaigns lead to quotes and orders. This feature does not collect the referring page, your browsing history or the full link, and does not send the label to an external analytics service. The label kept with a quote or order follows the retention rules below. Clearing site data removes the browser copy.

To stop one person claiming the same free reward over and over, we store a keyed one way digest of the network address a free reward was claimed from. It rolls over daily, the address itself is never stored, and the digest cannot be turned back into an address.

The public website does not use advertising or behavioral analytics cookies. Hosting and security infrastructure may still process ordinary request information and access logs to deliver and protect the site. Clearing site data removes the identifier, and with it the ability to show you an earlier order in that browser, so keep the public trade reference for anything still running.

We retain transaction, card order, escrow, reward, support, audit, and security records for as long as reasonably needed to operate the service, resolve disputes, prevent abuse, maintain financial records, and meet legal obligations. Retention can vary by record and partner route. Data is not guaranteed to be deleted immediately when a Telegram chat or message is removed.

We use access controls and other reasonable safeguards, but no online service, Telegram chat, database, or blockchain interaction is risk-free. Limit what you share and use only the official bot and this website.

You may ask about, correct, or request deletion of information associated with your Telegram account or with an order reference. We may need the public trade ID to locate records, and some information may need to be retained for legal, security, accounting, or dispute reasons. Rights vary by location.

Two limits are worth stating plainly. We cannot delete anything written to a public blockchain, including escrow activity. We can remove a published review from our own channel and page, but we cannot recall copies other people have already made of it.

Start through official support or open the Telegram bot. Do not include wallet credentials or identity documents in the first message.