GhostSwap Privacy Policy
Last updated: 1 October 2026
Privacy at a glance
- No account, no ID for standard swaps. We never ask for your name, email, phone number or identity documents to start a swap.
- We never hold your coins. Swaps are paid straight to the address you enter.
- We do not store your IP address in plain form. Our own analytics keeps only a hashed (scrambled) version.
- We do not sell your data and we do not use it for third-party advertising.
- Want the most privacy? Use GhostSwap through Tor Browser and our onion address (see section 9).
1. Who we are and what GhostSwap does
GhostSwap operates a non-custodial front-end interface at ghostswap.io for cryptocurrency-to-cryptocurrency conversions. We do not execute conversions ourselves and we never receive, hold or control your funds. Each conversion you request is created, executed and settled by a licensed third-party processing partner through its API. That partner generates the deposit address, receives your funds, sends the payout to the address you provide, and maintains the transaction ledger. In rare cases the partner may ask for verification before releasing a swap; any such check is carried out and held by the partner, not by GhostSwap. GhostSwap is designed to minimize the data it collects.
2. No accounts, no sign-up for standard swaps
You do not need to create an account, register, or provide identity documents to use the standard swap service. There is no username, password, profile or stored balance.
3. What we never collect
- Your name, email address or phone number (unless you choose to contact us)
- Identity documents for standard swaps
- Wallet passwords, seed phrases or private keys. We will never ask for them, and nobody from GhostSwap ever will.
- Your IP address in plain form in our own systems
4. What we do collect
What you enter for a swap. The currencies, the amount, the payout address and a refund address. These are needed to create the swap.
Swap records. Order records returned by our processing partner, such as the order identifier, timestamps, currencies and amounts, deposit and payout addresses, and blockchain transaction identifiers. Anyone with your swap ID can see its status page, so keep the ID to yourself if you prefer.
If you contact us. Your messages, the email address you write from, and any documents you choose to send. Where documents relate to an order held by our processing partner, we forward them to the partner and do not assess them ourselves.
Visit statistics. When you visit the site we record:
- a random session identifier stored in a first-party cookie, used to recognize your browser during your visit;
- a pseudonymized (hashed) form of your IP address. We do not store your IP address in plain form;
- your browser’s user-agent string, the page that referred you, the page you land on, any campaign or partner parameters in the link you arrived through (such as utm_ or ref=), and the date and time of the visit.
We link the swaps created on the site to the browser session that created them, so that we can measure which sources lead to completed swaps and pay partners who referred you. These statistics are about sources and pages, not about who you are.
5. Cookies and similar tools
- Necessary: a first-party session cookie (
__gs_sess) used for the statistics and partner attribution above. - Analytics: Google Analytics 4 sets cookies (
_ga,_ga_*) to measure site usage. Google states that GA4 does not log or store IP addresses. - Cookieless measurement: Cloudflare Web Analytics, which does not use cookies.
- Your browser’s local storage: the coin list and your last quote are kept on your own device to make the swap box load faster. They are not sent to us.
You can block or delete cookies in your browser, use a tracker blocker, or use Tor Browser (section 9). The swap service keeps working without analytics cookies.
6. How we use information
- To route and complete the swaps you request, through our processing partner
- To operate, secure and improve the site, and to detect and prevent fraud and abuse
- To measure our marketing, including which sources bring visitors and completed swaps, and to credit referral partners
- To answer your support requests
- To comply with applicable law and with lawful requests from authorities
We do not sell or rent your information, and we do not use it to serve you third-party targeted advertising.
7. Who else processes data
Processing partner. We share the details necessary to create and complete your swap with our licensed third-party processing partner.
Service providers. Providers that help us run the site process limited data on our behalf: hosting and content delivery (Cloudflare, which handles every connection to the site and therefore sees your IP address), analytics (Google Analytics, Cloudflare Web Analytics), website translation (GTranslate) and font, icon and image delivery networks that load parts of the page. They may use the data only to provide their services to us, under their own privacy policies.
Legal and law enforcement. We may preserve and disclose information, including transaction, technical, analytics and support records, to law enforcement, regulators, courts or other authorities where we receive a lawful request or valid legal process, or where we believe in good faith that disclosure is necessary to comply with the law, to cooperate with an investigation, or to protect the rights, property or safety of GhostSwap, our partners, our users or others. Where we are permitted to do so, we may make such disclosures without notifying you.
Business transfers. If GhostSwap is involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction.
8. How long we keep data
We keep transaction, technical, analytics and support information only for as long as necessary for the purposes described in this Policy, and longer where we need to comply with legal obligations, resolve disputes, enforce our terms, or preserve and produce records in connection with an actual or anticipated legal process. Records held by our processing partner are retained under the partner’s own policies and applicable law.
9. Using GhostSwap over Tor (recommended for maximum privacy)
For the strongest privacy, we recommend using GhostSwap through Tor Browser. Tor routes your connection through several volunteer-run relays, so the websites you visit, including ours, do not see your real IP address, and your internet provider does not see which sites you open.
- Download Tor Browser only from the official site: torproject.org.
- Open our onion address:
http://2auqkgbsfr5pt7q5tkztr6qoq3oarukvycqpjjscvhjbxer625z6wjyd.onion. When you visit ghostswap.io in Tor Browser, it also offers to switch to the onion address automatically (“Onion available”). - Our onion mirror includes the swap box and the swap status page. The blog, guides and translations are on ghostswap.io.
Tor is legal to use in most countries, including the United States, the United Kingdom and the European Union, and it is widely used by journalists, companies and privacy-conscious people. A few countries block or restrict Tor; please check the laws where you live before using it.
Extra tips: use a fresh receiving address for each swap, do not share screenshots of your swap ID or addresses, and for private balances consider privacy coins such as Monero.
10. Your rights
Depending on where you live, you may have rights over your personal information, including to request access, correction or deletion, and to object to or restrict certain processing. These rights are subject to legal limits; for example, we may need to retain information to meet legal obligations or to preserve records for legal process. To make a request about information held by GhostSwap, contact [email protected]. For information held by our processing partner, contact the partner directly. Because we do not run accounts, include the swap ID or other details that let us find the records you are asking about.
11. Data security
We use reasonable technical and organizational measures to protect information, including encryption of data in transit using TLS and access controls limiting access to authorized systems and personnel. No online service can guarantee absolute security, and you acknowledge that you use the platform at your own risk.
12. Children
GhostSwap is not intended for use by anyone under the age of 18, and we do not knowingly collect data from minors. If you believe a minor has used our service, please contact us and we will take appropriate steps.
13. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Your continued use of the platform after any changes constitutes acceptance of the revised policy.
14. Contact
General support: [email protected]
Legal and law-enforcement inquiries: [email protected]
By using GhostSwap, you acknowledge that you have read and understood this Privacy Policy.