Legal

Privacy policy

ZeroFee has no accounts, sets no cookies and runs no analytics. This policy explains what that means in practice, including the places where your data does reach other parties because a swap needs it.

Last updated: 2026-10-17

The short version

No account, no email, no name, no identity checks.
No cookies, no analytics, no advertising or tracking scripts.
ZeroFee's servers never create, hold or touch a wallet or a key. The temporary wallets that privacy steps use are made in your browser, and their keys stay there. Your browser keeps no history: a swap is remembered only while it runs, or up to 30 days if it stopped and you may need its details to claim the money (and a Zcash step's step-2 hand-over until you continue it, two weeks at most), plus a few preferences.
Our server proxies forward requests and do not store or log them. The one exception is a short problem report a swap's page sends when something goes wrong (see below).
To swap, the third-party providers you route through do receive addresses, amounts and your IP address. Each has its own policy.

What we do not collect

We do not ask for or store your name, email address, phone number, identity documents or any account details, because there are no accounts. We do not use cookies, analytics, advertising identifiers, session recording or fingerprinting. As of 2026-10-14 we checked the source and it sets no cookies and loads no analytics, advertising or tracking scripts. Fonts are bundled with the site and are served from it, so loading them does not contact a font host.

What is stored in your browser

There are no accounts, passwords or sign-in. The site keeps these in your browser’s local storage, on your device only:

while a swap is running, and only then: its coins and amounts, the addresses you entered, the protocol’s deposit address and the status, so its page survives a reload. It is erased the moment the swap finishes, except a swap that stopped (failed, or refunded on a route with a middle step): its record stays in your browser until you choose to forget it on its page, and for 30 days at most, because its order details are how you claim the money back;
during a privacy step, the temporary wallets that carry your money between steps and their keys, encrypted with a key your browser keeps for this site;
your preferences (such as your slippage setting) and a record of the version of the terms you accepted.

Nothing in it is sent to us, and no key in it ever reaches our servers (see Security). It has no password on it, so anyone who can use this browser profile can read it. If you clear the site’s data, it is gone and we cannot restore it. A browser that made a private run before 14 October 2026 may also hold that run's record and its short-lived hop-wallet keys, kept until the run finishes so its funds stay recoverable.

Pay links

A pay link holds its whole request in the URL: the receiving address, the chain, the coin, the amount, and any name and note you add. We do not store links or payment records. Anyone who has a link can read what is in it, and wherever you share it (a website, a chat, an email) may keep a copy. When someone pays a link, the payment request goes to the route provider (Relay or NEAR Intents) like any other swap, with the payer's refund address, the merchant's receiving address and the amounts.

What our server proxies receive

A few small endpoints sit between your browser and some providers. To forward a request they must read it. The application code does not store it and does not write it to a log.

/api/oneclick forwards confidential NEAR Intents requests (public ones go straight from your browser, and one the provider rate-limits is retried through it once): the coin pair, the amount, your recipient address and your refund address, plus the order status, with our partner key added on the server.
/api/exchange forwards the Monero step’s requests to the Exolix and ChangeNOW APIs: the coin pair, the amount, your recipient address and your refund address for both legs, with our partner key added on the server.
/api/rpc, /api/pool-relayer and /api/lwd forward the privacy steps' network requests: Solana requests for the temporary wallets, Privacy Cash's withdrawal service, and a Zcash light-wallet server.
/api/report receives one short problem report when a swap fails, runs much longer than usual or is found interrupted: the swap's id, its deposit address, the coins, chains and amounts, the step, the protocol, its tracking id and the error. It has no field for a key, a seed or your receiving address. The server writes it to its log as one line and forwards it to our support system.

To limit abuse, each endpoint counts requests per client IP address in memory for up to a minute at a time, and the count is discarded afterwards. Like any website, the infrastructure that serves a deployment (the hosting provider and any CDN) may keep its own standard access logs, such as IP address, time and path. That is outside the application code and depends on where a deployment is hosted.

What third parties receive

Swapping means involving other services. They see what they need to do their job, and each applies its own privacy policy. We link only to their main sites.

Contacted directly from your browser

These see your IP address and browser details like any website, plus the content of the request:

NEAR Intents (near-intents.org), for public requests: a swap on one chain, or a crossing with the confidential switch off. It receives the same details as Relay below. (Confidential requests go through our proxy; see below.)
Relay (relay.link), when it quotes or carries a swap or a payment. It receives the coin pair, the amount, slippage, your refund address and your recipient address, issues the deposit address, and later answers status requests.
Token lists and prices from Relay, NEAR Intents, Jupiter and DexScreener, plus chain nodes for a pasted token’s details: the searches and token addresses you look up.
Image hosts: token and chain icons are loaded from the addresses given in provider token lists. Those hosts see your IP address. We ask the browser not to send a referrer.
Block explorers, only if you click a link to one.
Telegram, only if you open support: the support bot receives what you send it, and the swap's id and deposit address when you open it from a swap's page.

Contacted through our proxies

Confidential NEAR Intents swaps and the Monero step’s exchanges, Exolix and ChangeNOW, are called from our server, so they see our server’s IP address instead of yours. In the Monero step each exchange receives only its own leg’s details. They still receive the order details: coins, amounts, your recipient address and your refund address. Once you send funds to their deposit address, that transaction is public on the blockchain. Each provider keeps its own records under its own policy, and those records can be exposed: in May 2026 a researcher reported that Exolix partner API keys exposed about 356,000 swap records. See Privacy protocols for what each party can link, and Security for each provider's record.

Public blockchains

The deposit you send and the payout the protocol makes are published to public blockchains, where anyone can see them, permanently. We cannot delete or alter them.

How information is used, and how long it is kept

We do not collect personal data about you, so we do not use it for profiling, marketing or sale, and we do not share it. Data in your browser stays until you delete it. Providers keep what they keep under their own policies; we cannot delete it for you.