Exswaping
Privacy Policy
Exswaping Privacy Policy
This policy describes how the Exswaping service at exswaping.com handles user data when you use the online cryptocurrency exchange.
Data we may process
- Contact details submitted with an order (Telegram, email, phone, payout details).
- Technical data (IP address, cookies, browser parameters) required for site operation and security.
- Information required for AML/KYC checks under service rules and the selected exchange route.
How data is used
- Processing exchange orders and support communication.
- AML/KYC compliance and fraud prevention.
- Improving site performance and service quality.
Third-party sharing
Exswaping does not sell personal data. Sharing occurs only where required by law, AML/KYC rules, or to complete an order (for example, payment partners for the selected route).
Retention and security
Data is retained only as long as needed to provide the service and meet legal requirements. Organizational and technical safeguards are applied.
Your rights
You may request clarification or deletion of data where this does not conflict with law or active order processing. Contact support with your order ID.
Related documents
Support: Telegram @exswaping, WhatsApp.
Optional analytics and visit attribution
Effective date of this section: 2026-08-07.
When you accept optional analytics, Exswaping may:
- Load Google Analytics 4 and/or Yandex Metrika under their respective terms — only after analytics consent.
- Store anonymous first-party attribution signals (opaque session id, UTM source/medium/campaign, sanitized referrer, landing path, locale, coarse device class) in browser session storage and, when attribution is separately enabled, on Exswaping servers.
- When separately enabled, link that anonymous session to an exchange order for marketing measurement only — not for order fulfillment.
Declining or withdrawing consent does not block exchange rates, order creation, or completion. This channel does not collect wallet addresses, email addresses, phone numbers, KYC data, payment details, passwords/secrets, customer message content, or order notes.
First-party attribution data is retained for 30 days after first capture, then expired or deleted. Local attribution keys are cleared on reject or withdraw. We do not claim that data already transmitted to Google or Yandex can always be remotely deleted.
Legal entity, registered address, jurisdiction, and DPO remain unpublished until verified. For privacy and data requests, contact privacy@exswaping.com. For exchange support, use official channels listed on exswaping.com.