Docs › Policies
Privacy policy
We collect what an order needs and nothing else. No accounts, no IP logs, no analytics, no cookies.
In short
- No accounts, no sign-up, no email, no identity documents.
- No IP addresses in our logs. Over the Tor onion service we never see your IP at all.
- No analytics, tracking, advertising or cookies.
- We store order data: addresses you enter, amounts, transaction IDs, timestamps and the order state.
- We don't sell data and share it only where an order or the law requires it.
What we store
| Data | Why |
|---|---|
| Order ID, kind, state, created and expiry time | To run and track the order. |
| Hyperliquid address you enter | Bridge deposits: where XMR2 goes. Redemptions: which incoming transfer is yours. |
| Monero address you enter | Where a redemption or exchange payout goes. |
| One-time deposit subaddress, amounts, fees, confirmations | To detect, confirm and credit your deposit. |
| Transaction IDs and Hyperliquid hashes, in and out | Proof of what was received and sent; verification of the reserves. |
| Screening results for transparent-chain addresses | Our obligations under the compliance policy. |
| An internal audit log of order events | To investigate problems and to show what happened to an order. |
We don't tie orders to a person. If you use the same address for several orders, those orders share that address in our records, as they do on the public blockchain.
What we don't collect
- IP addresses: our web server doesn't write access logs, and the application doesn't record client IPs. Over Tor the connection reaches us from the Tor network, not from you.
- Cookies and trackers: none. No third-party scripts, fonts or images are loaded; the page talks only to this site.
- Device fingerprints, analytics, ad identifiers: none.
What stays in your browser
Two items in your browser's local storage, never sent to us: your light/dark theme choice, and the IDs of your last five orders (so the Track tab can list them). Clear your browser's site data to remove them.
Third parties
- Public blockchains: Hyperliquid is a public ledger. Your Hyperliquid address, its balances and transfers (including XMR2 credits and redemptions) are visible to everyone. Monero transactions are private by design.
- Exchange routes: exchange orders move funds through third-party swap networks and asset bridges. They see the on-chain addresses and amounts involved and may screen them under their own rules.
- Price sources and comparison quotes: our server fetches market prices (Hyperliquid, KuCoin, Kraken and HTX), and Wagyu's quotes for comparison, over Tor. Your browser never contacts them, and they receive none of your data: comparison quotes use rounded amounts and public placeholder addresses.
When Beluga is also offered on a regular domain, that domain may be served through a content-delivery and security provider, which processes connection data (including IP addresses) to deliver the site and block attacks. The onion service is not affected.
Support messages
If you contact us, we receive what you send. Over SimpleX that is the message content without a phone number or account; over email, also your email address and what your provider adds. We use it only to answer you and delete support conversations when they are no longer needed.
Retention
Order records are kept as long as needed to operate and support orders, keep accurate accounts and meet legal obligations. Data on public blockchains can't be deleted by anyone.
Legal requests
We disclose data only when a valid, binding legal order requires it, and then only what an order contains (see above). We have no names or contact details to hand over.
Last updated November 6, 2026