Legal
Privacy Policy
Data handling disclosures for MoonSwap accounts, wallets, trading records, and notifications. Last updated September 21, 2026.
Scope and Controller
This Policy applies to personal data processed by the operator of MoonSwap through moonswap.trade, MoonSwap APIs, and related support or administrative services. Public blockchain data may remain personal data when it can be linked to a person. Third parties may act as service providers for MoonSwap or as independent controllers depending on their role; using a provider does not remove MoonSwap’s responsibilities for its own processing.
Data MoonSwap May Process
MoonSwap may process wallet addresses and signatures used to prove wallet control; account identifiers and verified administrative identifiers; IP address, device, browser, security, and request metadata; watchlists, alerts, notifications, settings, subscriptions, and automation rules; trade, quote, order, execution, fee, cancellation, expiry, and reconciliation records; holder-verification results; Co-Pilot messages, locally stored chat history, portfolio context and tool results; policy-acceptance version, document digest, timestamp and age/country attestations; support and privacy requests; and operational audit logs. MoonSwap does not request or need a wallet seed phrase or private key.
Sources and Purposes
Data comes from you, your wallet, public blockchains, service providers, and product interactions. It is used to authenticate wallet control, provide and secure the service, build and reconcile transactions, enforce order policies, maintain history and preferences, calculate holder benefits and fees, send requested notifications, prevent abuse, investigate incidents, satisfy legal obligations, and improve reliability.
Legal Bases
Where applicable law requires a legal basis, MoonSwap processes data as needed to provide requested wallet, account, routing, order, notification, and support services; to comply with legal obligations; and for legitimate interests in security, abuse prevention, reliability, accounting, and dispute handling, balanced against user rights. Optional analytics and push notifications rely on consent where required, and that consent may be withdrawn. Acknowledging this Policy or authenticating a wallet is not consent to optional analytics, marketing, or every other processing purpose. Where consent is used, withdrawal does not affect processing lawfully undertaken before withdrawal. Wallet authentication and transaction information are needed for the corresponding requested features; optional features can be declined. The applicable basis must be assessed for each purpose and jurisdiction.
Co-Pilot and AI Providers
When you send a Co-Pilot message, MoonSwap receives the message history, wallet address for authentication and a current balance snapshot. Messages and tool results, including portfolio summaries when requested, are sent by MoonSwap to OpenAI through its API to produce a response. Do not submit seed phrases, private keys, identity documents, or sensitive information unrelated to the request. Chat history is stored in this browser under a wallet-specific key; New chat clears that local conversation. Clearing local history does not recall information already sent to AI or infrastructure providers. Provider retention and use are governed by the applicable service configuration and terms; this notice does not promise zero retention or no training without verified contractual support.
Public Wallet Information
Smart Money features process public wallet addresses, holdings and transaction activity, including attributed wallet labels from external public sources. A label is a source attribution, not verified legal ownership or an endorsement. Public availability does not eliminate applicable privacy rights, and displayed data may be incomplete or misattributed.
Local Storage
MoonSwap caches settings, watchlists, alerts, notifications, orders, trade history and wallet-specific Co-Pilot conversations in the browser. Disconnecting a wallet does not erase those records. Use New chat to clear the current Co-Pilot conversation or clear site data through your browser to remove local records on that device.
Service Providers and Disclosures
MoonSwap may disclose the minimum necessary data to hosting, database, RPC, routing, liquidity, blockchain-data, notification, security, observability, and support providers, including Vercel, Supabase, Sentry, OpenAI for Co-Pilot, and the enabled Solana data and routing providers; professional advisers; authorities responding to valid legal process; and a successor in a corporate transaction. Public transaction data is broadcast to Solana and becomes publicly observable. MoonSwap does not sell personal data or use it for cross-context behavioral advertising.
Error Monitoring
When production error monitoring is enabled, Sentry may receive error messages, stack traces, release and runtime identifiers, page or request context, device and browser details, and network metadata needed to diagnose failures. MoonSwap configures error reporting to avoid wallet seed phrases, private keys, bearer tokens, service-role keys, and transaction-signing material. Do not include secrets or sensitive personal information in support descriptions or free-form fields.
Analytics and Cookies
Optional product analytics remain disabled unless deliberately enabled with an applicable legal basis and any required consent. If enabled, analytics may include coarse feature, token-symbol, route, amount, score, device, performance, and error events, but must not include wallet addresses, transaction signatures, emails, seed phrases, private keys, bearer tokens, or service-role keys. Essential local storage and security records may operate without optional analytics.
Retention
Retention depends on the purpose, whether a feature or account remains active, dispute and security needs, applicable legal obligations, and provider backup cycles. The scheduled cleanup removes expired wallet-authentication challenges, protected-submission replay records and push subscriptions that have expired or remained disabled for 30 days. Other application records do not yet have a universal automatic deletion deadline. Trade, order, fee and acceptance evidence must be limited to a documented operational or legal need; a seven-year period is not asserted as a universal legal requirement. Authenticated deletion controls are available subject to the limits below.
Exports, Deletion, and Immutable Data
Settings provides authenticated export and deletion of supported wallet-linked application records. A wallet deletion is not necessarily deletion of an entire account: a profile linked to an email address or another wallet may remain. Browser chat history, third-party logs and backups require separate handling. Deleting application records does not cancel on-chain orders, revoke wallet permissions, recover escrowed assets or erase public blockchain activity. Keep transaction and order identifiers needed for recovery before deleting local records. Some records may be retained where required for an applicable legal obligation, dispute or security purpose; provider backups expire on their own schedules.
Your Choices and Rights
You may clear browser-local data, revoke push permission, disconnect a wallet, and use authenticated export or deletion controls. Depending on your location, you may also have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal data, and to appeal or complain to a regulator. A wallet signature proves control of that wallet, not necessarily the identity of a person or authority over a linked account. Verification should be proportionate to the request. Where applicable law permits a restriction or refusal, the response should explain the reason and any available review or complaint route. Optional-consent withdrawal and privacy rights must not depend on agreeing to unrelated processing.
Security and International Processing
MoonSwap uses access controls, encryption provided by its infrastructure, secret separation, and audit logging intended to protect stored data. No system is perfectly secure. Providers may process data in the United States and other countries whose laws differ from your own.
Children
MoonSwap is not directed to children. You must be at least 18 and at least the age of majority in your jurisdiction. MoonSwap does not knowingly collect personal data from children through the service.
Policy Changes
MoonSwap may update this Policy by posting a new effective date. Material changes may be presented through the service or require renewed acknowledgement where applicable.