Privacy Policy.

The short version

We never ask who you are. No account, no name, no email, no phone number, no ID. We keep what a swap needs to work, nothing about you as a person, and we don't track you across the site or the web.

What we keep for an order

• The coins, networks and amounts you chose, and the rate and fee that applied.
• The wallet address that gets paid, and its memo or tag if you gave one.
• The deposit address, the blockchain transactions in and out, and the order's status and times.
• A one-way scrambled copy of your order key. The key itself is shown to you once and never stored, so nobody can read it back, us included.

Wallet addresses and transactions are public on their blockchains anyway. We don't link them to a name, because we never have one.

What we never collect

• Your name, home address, email, phone number or date of birth.
• Government ID, photos or selfies.
• Bank or card details.
• An account or password: there isn't one.

Cookies and your device

When you create or open an order, we set one cookie that keeps that order open in your browser. It is signed, can't be read by scripts on the page, holds only the Order ID, and expires after 12 hours.

The coin picker remembers the last few coins you chose, in your own browser's storage. It never leaves your device, and clearing your browser's data removes it.

There are no advertising cookies, no analytics and no tracking scripts. Every page loads from SilentMule alone.

Your connection

To stop abuse, we count how many requests come from one network address in the last minute or so. The count is held in memory only and is not saved with your order.

The servers that host SilentMule may keep short-lived technical logs, such as the time of a request and the page asked for, to keep the Service secure and running.

If you take payments as a merchant

A merchant record keeps the payout coin, the payout wallet and its memo, the shop name customers see, the webhook address and secret, and a one-way scrambled copy of the merchant key. Never an email, a name or an ID: we don't ask for them.

Each invoice keeps its price, your reference, its times, the orders made from it and what landed. Invoices are deleted 90 days after they close, with their webhook history. Deleting your merchant from the dashboard removes the record, its invoices and their history at once.

Payout wallets are checked against public sanctions lists when a merchant is set up. A customer paying at a checkout sees the shop's name and price, never its wallet.

If you use our Telegram bot

When a Telegram chat starts or follows an order, we keep a link between that chat's ID and the Order ID, so the bot can tell you when your coins move. That's all: no name, no username, no phone number, and no copy of what you type.

The link is deleted together with the order, 90 days after the order closes. Steps you're halfway through, like a coin you've picked, are kept for 30 minutes and then forgotten.

Telegram itself runs the chat. It stores cloud chats on its own servers under its own privacy policy, so the order key the bot shows you is in that chat too: copy it somewhere safe and delete the message if you like.

Who else sees order details

To carry out a swap, we pass the liquidity provider the details it needs: the coins, the amount, and the address that gets paid, with its memo or tag. Never anything about who you are, because we don't have it.

Prices come from public market data. Asking for them sends nothing about you.

We don't sell data, and we don't share it with advertisers. We give order details to authorities only when the law requires it, and then only what we have: the order itself.

How long we keep it

90 days. An order is deleted automatically 90 days after it closes, whether it landed, was refunded or was cancelled. An order that never received a deposit is deleted 90 days after its deposit window ends.

An order that is still open, held or waiting on a refund is kept until it closes, then the 90 days start.

Your choices

You can ask what we hold about an order, or ask us to delete it once it is finished. Write to us with the Order ID; we may ask you to prove the order is yours with its order key, so nobody else can do it for you.

If you write to us by email, we have your email address and your message. Use an address you're comfortable with; we use it only to answer you.

Security

Order keys are stored only as a one-way hash. Order pages are sent over an encrypted connection, kept out of search engines and never cached. Only people who run the Service can reach the order records.

Children

The Service is for people 18 and over. We don't knowingly handle orders from anyone younger.

Changes to this policy

If what we collect changes, this page changes first. The date at the top shows the latest version.

Contact

Questions about privacy: [email protected].