Atomic ExchangePrivacy Policy
What we collect, why, and your choices.
Last updated: 19 October 2026 · Effective: 19 October 2026
1. Who We Are
Atomic ("we," "us," "our") operates the atomicexchange.cloud interface for non-custodial crypto swaps and wallet actions. This policy explains how we handle information when you use the Service. It covers both Atomic Exchange (atomicexchange.cloud) and Atomic Pay (atomicpay.cloud), which share the same backend and operator.
2. Information We Process
| Category | Examples | Why |
|---|---|---|
| Wallet & transaction data | Public wallet address, source/destination assets and chains, amounts, quotes, transaction hashes | To generate quotes, route and execute swaps, show your history, and calculate fees |
| Compliance data | Sanctions/risk-screening results for connected addresses, approximate location/region | To meet legal obligations and prevent prohibited or illicit use |
| Technical & usage data | IP address, device/browser type, pages viewed, interactions, session recordings, error diagnostics | Security, fraud prevention, and improving the Service (via analytics) |
| Support data | Email address and message content when you contact support or report a bug | To respond to you and fix issues |
We do not require you to create an account, and we do not collect your name, government ID, or seed phrase. We never have access to your private keys.
3. How We Use Information
- Provide, operate, and secure the Service and process your swaps.
- Screen for sanctions, fraud, and prohibited activity, and comply with law.
- Understand and improve product usage (analytics and session replay).
- Respond to support requests and communicate service changes.
4. Cookies & Analytics
We use privacy-focused product analytics (currently PostHog) with cookies/local storage to understand usage, capture anonymized session replays, and diagnose errors. On our content and marketing pages we also use Google Analytics for aggregate, anonymized site-usage measurement; it is configured to truncate IP addresses and to disable advertising and cross-device signals. Both are non-essential and gated on your cookie-consent choice: in the EU/EEA/UK/Switzerland nothing loads until you accept, and elsewhere you can decline or withdraw at any time from the cookie banner.
No analytics runs on the pages that handle wallets, funds or signing. On Atomic Pay’s swap, gas, checkout and wallet pages our content-security policy permits no third-party script at all, so neither PostHog nor Google Analytics loads there and no cookie banner is shown — what we measure about those flows is recorded on our own servers instead. Atomic Exchange (atomicexchange.cloud) loads no third-party analytics and sets no analytics cookies; its content-security policy permits no external script or connection, so none could run there.
One page on Atomic Exchange keeps a first-party counter. On the prediction board (/predict) we count two things: that the board was displayed, and that a visitor followed a link out to the market venue. What is stored is a running total per day, per market, per category and per country — nothing else. There is no cookie, no identifier in your browser, no IP address, no user agent, no referrer, and no timestamp finer than the calendar day, so two actions cannot be linked to the same person and no session exists to be replayed. We count why you would expect: the board is new, and whether anyone actually follows a link decides whether we keep it. Country is recorded because the venue is unavailable in some places and we need to know whether the people reading are people it would serve.
You can limit tracking through your browser settings or tracking-protection tools. We do not use advertising trackers. This notice covers both Atomic Pay (atomicpay.cloud) and Atomic Exchange (atomicexchange.cloud).
Risk Watch notifications. If you turn on browser notifications for the Risk Watch daily digest at atomicexchange.cloud/risk-watch, we store only the push subscription your browser gives us: an address at your browser's push service and the keys needed to encrypt messages to it. We do not store your name, email, IP address or browser details with it. Turning notifications off on the page, or revoking the site's notification permission, deletes the subscription; we also delete it when the push service reports that it no longer exists. The Telegram digest channel is public and we hold no data about who reads it.
Risk Watch corrections. If you ask us to review a listing, we keep the contact details and message you send, and the IP address the request came from (to limit abuse), so that an operator can reply and so that the decision is logged.
5. How Information Is Shared
- Liquidity providers & blockchains. To execute a swap, transaction details are sent to the relevant Provider and broadcast on public blockchains, where they are permanently visible.
- Service vendors. Analytics, hosting, email, and compliance/sanctions-screening vendors that process data on our behalf under contract.
- Legal. When required by law, regulation, legal process, or to protect rights, safety, and prevent fraud or illicit activity.
We do not sell your personal information.
6. Connecting an AI Assistant to the Flash Desk
If you are an Atomic Flash Desk counterparty, you can connect an AI assistant such as ChatGPT or Claude to your facility. You sign in on mcp.atomicexchange.cloud with your existing desk account. This section explains what that connection processes.
| What | Details | Why |
|---|---|---|
| Sign-in | Your desk username, password and authenticator code are checked by the desk. The connection does not store your password or code. | To confirm it is you and find which facility you belong to |
| Connection record | The assistant's registered app name, your username and your facility's sending address, and access tokens stored only as one-way hashes | So the assistant can act for your facility and nobody else's, and so the connection can be revoked |
| Tool requests | What the assistant sends when it calls a tool, for example the chain, asset, amount and contract calls of a drawing you ask it to simulate | To answer the request |
| Activity log | For each tool call: the time, the tool, your facility's address and the outcome | Security, abuse prevention and support |
We do not receive your conversation with the assistant, only the tool requests it makes. What a tool returns (your facility's limits and usage, or a simulation result) is sent to the assistant's provider and handled under that provider's own privacy policy, for example OpenAI's for ChatGPT or Anthropic's for Claude. The connection never asks for a private key or seed phrase and cannot sign or send a transaction.
Access tokens expire after one hour and renewal tokens after thirty days. Disconnecting the app in your assistant ends its access, and we can revoke every connection on your facility at your request. Activity logs are kept under section 8.
7. On-Chain Data Is Public
Blockchain transactions — including wallet addresses, amounts, and hashes — are public, permanent, and outside our control. Anyone can view and analyze them. Please keep this in mind when transacting.
8. Retention
We keep information only as long as needed for the purposes above or as required by law (for example, compliance and financial-record obligations). On-chain data cannot be deleted by us or anyone else.
9. Security
We use reasonable technical and organizational measures to protect information we process. No method of transmission or storage is completely secure, and you are responsible for securing your own wallet and keys.
10. Your Rights
Depending on where you live (for example, under GDPR or the CCPA), you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or lodge a complaint with a regulator. To make a request, contact us at support@atomicpay.cloud. Note we may be unable to identify you from a wallet address alone, and we cannot alter on-chain data.
11. International Transfers
We and our vendors may process information in countries other than yours. Where required, we use appropriate safeguards for such transfers.
12. Children
The Service is not directed to anyone under 18, and we do not knowingly collect data from children.
13. Changes
We may update this policy from time to time. Material changes take effect when posted with a new "Last updated" date.
14. Contact
Privacy questions: support@atomicpay.cloud.