Privacy Policy

GhostDrip is a non-custodial, allowance-only Dollar Cost Averaging (DCA) tool for Monero (XMR). We provide a software interface that enables users to automate cryptocurrency swaps.

What we do:

• Provide a web interface for creating automated DCA strategies
• Execute swaps on behalf of users using their wallet allowances
• Route transactions through third-party exchange services

What we do NOT do:

• Hold, custody, or control user funds or private keys
• Buy, sell, or trade cryptocurrency as a principal
• Handle fiat currency transactions
• Provide financial advice or investment recommendations

GhostDrip is designed with privacy as a core principle:

• No user accounts: We do not require registration or account creation
• No cookies: We do not use tracking cookies or similar technologies
• No analytics: We do not collect behavioral data or build user profiles
• No tracking: We do not monitor user activity across sessions or devices

Users interact with GhostDrip through wallet connections only. We do not track or profile users beyond the minimal data required for strategy execution.

When a user creates a DCA strategy, GhostDrip temporarily stores only the following data necessary for strategy execution:

• EVM wallet public key (for allowance verification)
• Asset to allocate (token contract address)
• Amount to allocate per execution
• Frequency of the strategy (time interval)
• Monero (XMR) wallet public key (destination address)

This data is stored for operational purposes only and is automatically deleted when the strategy finishes.

A strategy is considered finished when any of the following occurs:

• The configured number of runs completes
• The user manually stops the strategy
• There are insufficient funds for execution 3 times in a row

We maintain minimal, ephemeral backend logs strictly necessary to operate, debug, and secure the service.

What our logs contain:

• Non-content technical events (timestamps, job status, error codes)
• System performance and security monitoring data
• No behaviorally identifying analytics or user profiling data

Logs are automatically purged after 72 hours. We do not link logs to personal identities and do not use them to build user profiles or behavioral analytics.

Trocador:

We route cryptocurrency swaps through Trocador, a third-party exchange aggregator. Trocador has its own privacy policy that governs their data processing practices. We do not control how Trocador processes data related to your transactions.

View Trocador's Privacy Policy

Partner Exchanges:

Through Trocador's routing, your swaps may be executed on various partner exchanges. Each exchange has its own privacy policy and may retain information about:

• Transaction amounts and cryptocurrency types
• Wallet addresses involved in trades
• Transaction hashes and blockchain records
• Timing and frequency of trades

If you contact us for support, we may temporarily process your email or message content to resolve your request.

We delete all support emails and messages when we consider the support request closed. We do not retain copies of support communications beyond the resolution period.

We process personal data based on the following legal bases:

• Performance of contract: To execute your DCA strategy as requested
• Legitimate interests: To maintain service security, reliability, and debugging
• Legal obligations: To comply with applicable laws and regulations

Subject to applicable law, you may have the following rights:

• Access: Request information about data we process about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (where legally permissible)
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data in a structured format
• Objection: Object to processing based on legitimate interests

To verify your identity for rights requests, you may be asked to sign a message from the wallet address associated with your strategy.

To exercise these rights, contact us using the information in the Contact section below.

We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

GhostDrip is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18.

If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.

We may update this privacy policy from time to time. When we make material changes, we will notify users by updating the "Last updated" date at the top of this policy.

Continued use of GhostDrip after policy changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, please contact us using the information above.