Privacy Policy
Last updated: March 25, 2026
ChainBridge Trading ("we", "our", or "the Platform") is a non-custodial decentralized exchange (DEX) aggregator. We do not create user accounts, store private keys, or maintain a database of personal information. This Privacy Policy explains what limited data is processed when you use our platform and how it is handled.
By using ChainBridge Trading, you acknowledge and agree to the practices described in this policy.
1. Information We Collect
1.1 Wallet Addresses
When you connect your wallet, your public wallet address is used temporarily to:
- Request swap quotes from DEX aggregators
- Fetch token balances and portfolio data
- Generate transaction calldata for signing
- Query bridge routes and staking positions
Your wallet address is sent to third-party APIs as part of quote and transaction requests. We do not store wallet addresses on any server or database.
1.2 IP Addresses
Your IP address is processed temporarily and solely for rate limiting purposes to protect the platform from abuse. IP addresses are not stored persistently and are not associated with wallet addresses or any other identifiers.
1.3 Browser Local Storage
We store user preferences and session data in your browser's localStorage. This data never leaves your device and is not transmitted to our servers. You have full control to view, modify, or delete this data at any time.
| Storage Key | Purpose | Data Stored |
|---|---|---|
chainbridge_theme | Theme preference | Selected theme (light, dark-blue, dark-orange) |
chainbridge_transactions | Transaction history | Past swap/bridge transaction details |
chainbridge_favorites | Favorite tokens | Token addresses marked as favorites |
chainbridge_recent_tokens | Recent tokens | Recently used token addresses |
chainbridge_alerts | Price alerts | User-configured price alert thresholds |
chainbridge_trading | Trading orders | Limit/stop-loss order configurations |
chainbridge_currency | Currency preference | Display currency (USD, EUR, GBP, etc.) |
chainbridge_onboarding | Onboarding state | Whether onboarding has been completed |
chainbridge_cookie_consent | Cookie consent | Your cookie/analytics consent choice |
1.4 Analytics Data
If you consent to analytics cookies, we use Google Analytics to collect anonymized usage data such as page views, session duration, and general geographic region. This data is aggregated and cannot be used to identify individual users. You may opt out of analytics tracking at any time by clearing your cookie consent from localStorage.
2. How We Use Information
The limited data we process is used exclusively for the following purposes:
- Execute swaps and bridges: Your wallet address is sent to DEX aggregators to obtain quotes and generate transaction calldata for your approval.
- Display token prices: Token addresses are sent to pricing APIs to show real-time USD values.
- Rate limiting: IP addresses are used temporarily to enforce per-endpoint rate limits and prevent abuse.
- Transaction simulation: Pending transactions may be simulated via Tenderly to estimate gas and detect potential failures before you sign.
- Improve the platform: Anonymized analytics data (if consented) helps us understand usage patterns and improve the user experience.
We do not sell, rent, or share any data with third parties for marketing or advertising purposes.
3. Third-Party Services
ChainBridge routes requests through several third-party APIs to provide DEX aggregation, bridging, and pricing services. When you initiate a swap or bridge, your wallet address and transaction parameters are sent to the relevant providers. Each provider has its own privacy policy governing data handling.
DEX Aggregators
| Provider | Data Shared | Purpose |
|---|---|---|
| 0x Protocol | Wallet address, token pair, amount | Swap quotes and Permit2 transaction data |
| 1inch | Wallet address, token pair, amount | Swap quotes and Fusion mode routing |
| ParaSwap | Wallet address, token pair, amount | Swap quotes and transaction data |
| KyberSwap | Wallet address, token pair, amount | Swap quotes and routing |
| UniswapX | Wallet address, token pair, amount | Intent-based order quotes |
| Balancer V3 | Token pair, amount | GraphQL SOR swap quotes |
| Thorchain | Wallet address, asset pair, amount | Native cross-chain swap quotes |
Bridge Providers
| Provider | Data Shared | Purpose |
|---|---|---|
| LI.FI | Wallet address, source/destination chain, token, amount | Cross-chain bridge routing |
| Socket (Bungee) | Wallet address, source/destination chain, token, amount | Cross-chain bridge routing |
| SwapKit (Thorchain) | Wallet address, asset pair, amount | Native cross-chain bridges |
Other Services
| Provider | Data Shared | Purpose |
|---|---|---|
| CoinGecko | Token contract addresses | Real-time USD/multi-currency pricing |
| Google Analytics | Anonymized page views, session data (if consented) | Platform usage analytics |
| WalletConnect | Connection metadata | Wallet connection relay |
| Tenderly | Transaction calldata, wallet address | Transaction simulation before signing |
4. Cookies and Local Storage
4.1 Cookies
ChainBridge uses a minimal number of cookies:
- CSRF Token (Essential): A double-submit cookie used to protect against Cross-Site Request Forgery attacks. This cookie is strictly necessary for security and does not track you.
- Google Analytics (Optional): If you consent to analytics, Google may set cookies to measure site usage. These are only activated after you explicitly accept analytics tracking.
4.2 Local Storage
All user preferences and session data are stored exclusively in your browser's localStorage (see Section 1.3 for a complete list). This data is stored on your device only, is never transmitted to our servers, and can be cleared at any time through your browser settings or by clicking "Clear Site Data" in your browser's developer tools.
5. Data Retention
ChainBridge Trading does not maintain any server-side database of user data. Our data retention is minimal by design:
- Wallet addresses: Used only for the duration of an API request and discarded immediately after.
- IP addresses: Retained in memory only for rate limiting windows (typically seconds to minutes) and never written to persistent storage.
- localStorage data: Stored on your device until you choose to delete it. You have full control over this data.
- Analytics data: If consented, Google Analytics retains anonymized data according to its own retention policies.
6. Your Rights
Under the General Data Protection Regulation (GDPR) and similar data protection laws, you have the following rights:
- Right of Access: All data stored by ChainBridge is in your browser's localStorage, which you can inspect directly via browser developer tools.
- Right to Erasure: You can delete all locally stored data at any time by clearing your browser's localStorage for this site. Since we do not store data server-side, clearing localStorage effectively removes all data associated with your use of ChainBridge.
- Right to Data Portability: You can export your localStorage data through your browser's developer tools (Application > Local Storage).
- Right to Withdraw Consent: You can withdraw analytics consent at any time by clearing the
chainbridge_cookie_consentkey from localStorage. Analytics tracking will stop on the next page load. - Right to Object: You can disconnect your wallet at any time to stop all data processing related to your wallet address.
7. Security
ChainBridge Trading implements multiple security measures to protect the platform and its users:
- Non-custodial architecture: We never have access to your private keys, seed phrases, or wallet funds. All transactions require your explicit signature from your own wallet.
- HTTPS encryption: All communications between your browser and our servers are encrypted using TLS.
- CSRF protection: Double-submit cookie pattern to prevent cross-site request forgery.
- Rate limiting: Per-IP, per-endpoint rate limits to prevent abuse.
- Security headers: CSP, HSTS, X-Frame-Options, and other security headers are enforced.
- Input validation: All inputs (addresses, amounts, chain IDs) are validated using Zod schemas.
- Phishing detection: Built-in token phishing detection for unicode attacks, symbol similarity, and address blacklisting.
- API keys server-side only: Third-party API keys are never exposed to the client browser.
8. Children
ChainBridge Trading is not intended for use by anyone under the age of 18. We do not knowingly collect or process data from minors. If you are under 18, please do not use this platform. If we become aware that we have inadvertently processed data related to a minor, we will take steps to address the situation promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we handle data. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
10. Contact
If you have questions or concerns about this Privacy Policy or our data practices, you can reach us through the following channels:
- Twitter/X: @ChainBridgeDEX
- Discord: Join our community server for support
- Telegram: Community support group