Privacy Policy

1. Introduction

Bestflow ("we", "us", "our") is built with privacy at its foundation. This Privacy Policy explains how we handle information when you use the Bestflow website and services (the "Service"). We do not require registration, KYC verification, wallet connection, or any form of identity verification. Your privacy is not a feature — it is a guarantee.

2. Information We Do Not Collect

Bestflow does not collect, store, or process:

• Personal identification information (name, email, phone number, ID documents)
• Account credentials (no accounts are created)
• Wallet private keys or seed phrases
• Biometric data
• IP addresses or geolocation data
• Browser fingerprints or device identifiers
• Browsing history or usage patterns

3. No Tracking, Analytics, or Profiling

Bestflow does not use any analytics services, tracking pixels, advertising networks, or user profiling technologies. We do not participate in Google's Topics API, FLoC, or any other interest-based advertising cohorts. We respect Do Not Track (DNT) and Global Privacy Control (GPC) signals by design — our architecture makes tracking impossible, not merely opted-out.

4. Information That May Be Processed

When you use the Service, the following information may be temporarily processed to facilitate your swap:

• Cryptocurrency addresses — sender and recipient wallet addresses provided by you to execute a swap
• Transaction details — swap amounts, selected trading pairs, and chosen exchange provider
• Order identifiers — unique IDs generated to track swap status

This data is processed ephemerally and is not linked to any identity or persistent profile.

5. How Information Is Used

Any information processed is used solely to:

• Facilitate and route your cryptocurrency swap to the selected exchange provider
• Display real-time swap status and order tracking
• Maintain service availability

We do not monetize, sell, rent, or share your data with any party other than the exchange provider you explicitly select.

6. Third-Party Exchange Providers

When you initiate a swap, your transaction details (wallet addresses, amounts) are shared with the third-party exchange provider you select. Each provider operates under its own privacy policy. Bestflow is not responsible for how third-party providers handle your data. We encourage you to review their privacy practices before initiating a swap.

7. Local Storage

Bestflow stores minimal, non-sensitive data (such as recent swap references) in your browser's local storage for your convenience. This data never leaves your device and is not transmitted to any server. You can clear all locally stored data at any time using the button below or through your browser settings.

8. Cookies

Bestflow does not set any cookies. We do not use tracking cookies, advertising cookies, session cookies, or third-party analytics cookies. The Service functions entirely without cookies.

9. Network Privacy

All connections to the Bestflow API are made without referrer headers, without credentials, and over encrypted HTTPS connections with strict transport security. External links use rel="noreferrer" to prevent leaking your browsing context. We disable DNS prefetching to prevent unintended DNS queries.

10. Data Security

We implement strong technical measures to protect information processed through the Service, including Content Security Policy, HTTP Strict Transport Security, and cross-origin isolation headers. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Data Retention

We retain transaction data only for as long as necessary to provide the Service. Order tracking data is retained for a limited period to allow status checks, after which it is permanently deleted. We do not maintain long-term logs or archives of user activity.

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly process information from minors.

13. Your Rights

Because we do not collect personal data or maintain user accounts, there is no personal data to access, correct, or delete on our servers. Any data stored locally on your device is fully under your control and can be erased at any time.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

15. Contact

If you have any questions about this Privacy Policy, please contact us at support@bestflow.xyz.