Privacy architecture

There is nothing to sign up for. A swap needs exactly one thing from you: the destination address funds should arrive at (plus an optional refund address). No email, no password, no phone number — so there is no identity record to breach, subpoena, or sell. KYC is not skipped; it is impossible, because the system has no mechanism to verify who you are.

We store only what processing a swap requires: the pair, the amount, and the addresses involved. IP addresses are not logged against swaps. Once a swap finalizes, its data is purged. What we never had, we cannot leak.

Funds move directly between your wallet and the exchange leg — AnonExch never holds a balance for you. There is no wallet to freeze and no withdrawal to approve. If our site vanished mid-swap, the exchange itself would still settle or refund on-chain.

The default Private mode goes further than a direct trade: the swap is routed so that no single exchange party ever sees both the sending side and the receiving side. The on-chain link between the coins you sent and the coins you received is broken — a blockchain-explorer observer, or the recipient themselves, cannot trace the payout back to your source wallet. No wallet connection is required, and the same all-inclusive pricing applies.

The site itself is built not to talk about you either: no third-party analytics, no ad pixels, no external CDNs — every asset, font, and API request is served from our own origin, enforced by a strict Content Security Policy. Your browser makes no request that leaves our infrastructure.

Honesty matters more than marketing: the blockchains themselves are public, your wallet's own behaviour (address reuse, exchange-linked addresses) can identify you independently of us, and the network path between you and any website reveals your IP to it — use Tor or a VPN if that is part of your threat model. Our job is to make sure the swap itself adds nothing to what an observer can learn.