Privacy Policy

Last updated: 2026-09-26

This English-language version is the authoritative and governing version of this document. Any translation is provided for convenience only; in the event of a conflict, the English version controls.

This page explains what data Cherum (“we”) processes when you use cherum.io, app.cherum.io, dashboard.cherum.io, pay.cherum.io, claim.cherum.io, the embeddable widget and the API, and how long we keep it.

1. What we don’t do

We don’t sell your data. We don’t run third-party advertising trackers. We don’t ask for identity documents. Connecting a wallet never gives us control over your funds.

2. Blockchain data is public

Transactions you sign are recorded on public blockchains. Wallet addresses, amounts and transaction hashes are public by the nature of those networks and cannot be deleted by us.

3. Account data

The dashboard signs you in with an email magic link — we store your email address and the wallets you choose to link (via a signed message). Team invitations store the invitee’s email address and role.

4. Operational data

To run swaps, payouts, payments and claims we store the operation’s technical record: addresses, assets, amounts, transaction hashes, timestamps, and the quotes we received. Exchange records are deleted after 365 days on a daily schedule. Records that form part of your dashboard history — payments, payouts, claims — are kept while your account is active, so your books stay complete.

5. Payments (merchants and payers)

For a hosted invoice we store the invoice details the merchant created, the payer’s on-chain payment and, if a refund is requested, the refund address the payer submits. Payment events are delivered to the merchant’s webhook endpoint — the merchant is an independent controller of what they do with them.

6. Security and abuse protection

Our sites sit behind Cloudflare. We read the connecting address it forwards to rate-limit abuse and protect payments. Like most websites, our web servers keep standard access logs (connecting address, browser string, page and time) for up to 52 days, for security and abuse prevention only; error reports from our pages include the browser type and version so we can fix what breaks. When you sign in to the dashboard we record the sign-in method, the country Cloudflare reports and a device class (phone, tablet, desktop or bot, plus the operating system family), kept 90 days. Service health checks are kept 30 days, internal admin actions 180 days.

7. First-party analytics

We measure visits ourselves: our servers record the page, the referrer, the country Cloudflare reports and a device class worked out from the browser string (phone, tablet, desktop or bot, plus the operating system family). Our visit records do not include the connecting address or the browser string. The same country and device class are recorded when a payment page or a claim page is opened. Visits are grouped by a random identifier kept in your browser: on cherum.io it lives in session storage and is gone when you close the tab; the app keeps its own in local storage until you clear site data. Campaign attribution uses one first-party cookie holding only the campaign tag and the referring site. All of this is kept 90 days. No Google Analytics, no ad pixels, no third-party trackers.

8. Templates and contacts sync

If you enable cross-device sync, your templates and contacts are end-to-end encrypted in your browser before they reach us. We store an encrypted blob we cannot read.

9. Who else sees data

To quote and execute a swap we send the necessary technical fields (addresses, assets, amounts) to the liquidity and bridge providers involved in your route. Magic-link emails are delivered through our email relay. Cloudflare proxies our traffic.

10. Retention summary

Exchange operations and quotes: 365 days. Dashboard history (payments, payouts, claims): while your account is active. Admin audit: 180 days. Our own traffic log, dashboard sign-in records, the country and device class of payment-page openings, alerts: 90 days. Health checks, metrics, routing decisions, payout drafts: 30 days. Deletion runs automatically every day.

11. Your choices

You can use the exchange and the widget without an account. You can unlink wallets and leave a team in the dashboard. On-chain data cannot be deleted (see §2). To ask for a copy or deletion of your account data, write to [email protected].

12. Changes and governing law

We’ll update this page and the date above when practice changes. This policy is governed by the same law and dispute-resolution terms as our Terms of Service.