Privacy

Short version: no accounts, no cookies, no trackers, no analytics. Here is exactly what exists and who sees it.

In your browser only

• Your order list and vaults (including vault keys) are stored in your browser's local storage. Cipher does not receive them. Burn history and Forget vault delete them.
• Your notification preference, if you turn notifications on. Notifications are generated locally; no push service is used.

On our servers

• Live chat messages, if you send any (see below).
• Payment request mailboxes: when someone pays a request link, their browser leaves the deposit address encrypted with a secret only the link holds, filed under a one-way hash of that secret. We cannot decrypt it or tell which request it belongs to. Entries expire after 30 days.
• Hourly totals for the public board: number of routes opened and settled, total dollar volume, chains used. No addresses, no amounts per user, no order ids. Settled orders are de-duplicated using a salted one-way hash. Totals expire after nine days.
• Hosting logs: our host (Vercel) records standard request logs, including IP addresses and requested URLs, for a limited period under its own policy. Order pages contain the deposit address in the URL.
• We do not store your receiving or refund addresses, your IP address or your swap history in any database of our own.

Who else sees what

• NEAR Intents receives the details needed to quote and settle: assets, amounts, receiving and refund addresses. It sees both sides of every swap it settles.
• Public blockchain RPCs receive the receiving address when we check whether it has history.
• Token logos are fetched by our server and served from our domain, so your browser does not contact logo providers.
• Anything you send on a public blockchain is public.

Live chat

If you use the chat button, your messages are stored in our support database (Cloudflare D1) with a random conversation id kept in your browser. No name, email or account is needed. The operator gets a notification that a message arrived, without its contents. Conversations are deleted after 30 days. Never send seed phrases or keys; we will never ask for them.