How we handle your data

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Principle of data minimization

xmrhub is deliberately designed for data minimization. There is no registration, no user account and no login. We use no tracking cookies and embed no analytics or advertising networks.

3. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the site, Vercel processes technically necessary data (e.g. IP address, date/time, requested resource, browser type) to deliver and secure the site. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure, functioning service). As processing may partly take place in the USA, we base the transfer on appropriate safeguards (EU standard contractual clauses and/or the EU-US Data Privacy Framework). Details: Vercel Privacy Policy.

For anonymous reach measurement we use Vercel Web Analytics. It records aggregated usage statistics (e.g. page views) without cookies and without persistently storable personal identifiers; individual visitors are not identified. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in privacy-friendly reach measurement).

4. Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits. This data cannot be attributed to specific persons and is not merged with other data sources. Basis: Art. 6 (1) (f) GDPR.

5. Swap & price functions (ChangeNOW, CoinGecko)

When you start a swap, the details required for it (e.g. selected currencies, amount and the receiving or refund address you enter) are transmitted via our server interface to our partner ChangeNOW, which technically performs the swap. We do not permanently store these addresses on our systems. For processing by ChangeNOW, its privacy policy applies. The legal basis is Art. 6 (1) (b) GDPR (performance of the service you requested).

To display rates and charts we retrieve price data via CoinGecko. This retrieval is performed server-side by us — your browser does not contact CoinGecko directly.

For the optional purchase with euro (fiat), verification (KYC) with the respective payment/onramp partner is legally required; the data provided is processed by that partner under its own responsibility.

6. Local storage in the browser

Where the site stores settings locally, this happens exclusively in your browser (localStorage) and is not transmitted to us.

7. Your rights

Under the GDPR you have, in particular, the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise them, an informal message to the email address above is sufficient.

8. Right to lodge a complaint with a supervisory authority

Without prejudice to other remedies, you have the right to lodge a complaint with a data-protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

9. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.

Last updated: [month year]