Privacy Policy

You can connect a wallet you already control — TronLink, MetaMask or another — in which case your private keys stay in that wallet and never reach us. Or you can open an account with us, which stores a balance on our ledger and requires an email address and password. What we hold depends entirely on which of the two you use.

The site itself stores four things in your browser. A wallet you connect may store its own entries alongside them, which are that wallet's to explain, not ours:

• NEXT_LOCALE — the language you chose, so the site does not revert to English on your next visit. One year, SameSite=Lax.
• ap_custody_token — your session, if you have signed in to an account. Removed when you sign out.
• ap_pwa_install_dismissed — remembers that you closed the install prompt.
• ap-hw-device — the hardware wallet you last connected, for the current tab only.

Only if you open an account with us:

Your email address; a hash of your password, never the password itself; your two-factor secret if you enable it; the deposit addresses issued to you and their private keys, held encrypted so we can move funds on your instruction; your ledger balances and the entries behind them; your deposit and withdrawal records; and an audit log of administrative actions taken on your account.

If you only ever connect your own wallet, we store none of this. We do not know your address unless you tell us.

We never ask for, receive or store your recovery phrase, and we never ask for the private key of a wallet you connect — those stay in your wallet and never reach us. An account is different in one respect worth stating plainly: the deposit addresses we issue to you are ours to operate, so we hold their keys, encrypted, in order to move funds you ask us to move. We also run no analytics, no tracking pixels, no advertising identifiers and no third-party cookies. As of this version, the site loads no analytics script at all.

Using the wallet means your browser makes requests to services we do not run. Each of them can see your IP address:

• TronGrid — reads TRON balances and transaction history for the address you connect.
• CoinGecko — market prices for the assets we list.
• WalletConnect — only if you pair a mobile wallet.
• GitHub — only when you download a desktop installer.

Anything you send on chain is public, permanent and outside our control. An address you use here can be linked to your other activity by anyone. We cannot delete, alter or hide an on-chain transaction, and neither can you.

You can ask us for a copy of what your account holds, ask us to correct it, or ask us to close the account and delete it. Some records — a completed withdrawal, for instance — may have to be kept where the law requires it. Requests go to the contact below.

If this policy changes materially, the change will be announced in the app, in advance where we are able to.