diff --git a/src/app/privacy/page.tsx b/src/app/privacy/page.tsx index 6587e6b..2eb3d3e 100644 --- a/src/app/privacy/page.tsx +++ b/src/app/privacy/page.tsx @@ -23,7 +23,7 @@ export default function Privacy() { {/* Content */}

- Effective July 2, 2026. + Effective October 9, 2026.

@@ -139,18 +139,22 @@ export default function Privacy() {

  • What we do not share: seed phrases, private spend keys, balances of un-authorized assets, history of other origins.
    • -

    G. Optional Crypto Swaps

    +

    G. Optional Crypto Swaps and Other Third Parties

    - Smirk offers in-wallet crypto swaps (e.g. BTC ↔ XMR) via third-party - aggregators such as Trocador. We do not operate an - exchange ourselves. When you choose to swap, the wallet queries the - third-party aggregator for quotes and routes the trade through them. + Smirk offers in-wallet crypto swaps through independent providers. We do not + operate an exchange ourselves and we are never in custody of, or in the settlement + path for, the swapped funds. Opening the Swap tab contacts no swap provider. Each + provider is contacted only after you choose it, and directly from your device + unless stated otherwise, so it sees your IP address.

    H. Nostr Identity & name@smirk.cash

    @@ -181,6 +185,7 @@ export default function Privacy() {
  • Retention: a relay we operate stores encrypted messages briefly (currently about 30 days) so your other devices can fetch them, then deletes them.
  • Your choice of relay: you can use other Nostr relays instead of, or in addition to, ours — messaging does not depend on us.
  • Opt-in: messaging is a feature you choose to use.
    • +
  • Tips to a Nostr identity: these travel as gift-wrapped messages on Nostr relays. The key that claims the tip is sealed a second time between sender and recipient, so neither a relay nor a website you have granted Nostr access can read it, and the wallet refuses to decrypt its own tip messages for websites.

    • J. IP Addresses

    @@ -238,7 +243,7 @@ export default function Privacy() {
  • Encrypted: All tip payloads are encrypted on your device.
  • Identity: We only store your Social ID to help people find your public key.
  • Dapps: The window.smirk API is opt-in per origin, revocable per origin, and can be turned off globally in Settings.
    • -
  • Swaps: Optional, opt-in, routed through third-party aggregators (e.g. Trocador). We never operate an exchange, but we do earn a ~1% referral commission that's baked into the quoted rate.
    • +
  • Swaps: Optional and opt-in through Trocador, THORChain (via Liquify) or NonLogs. Opening the Swap tab contacts no provider. We never operate an exchange, but we earn a commission from Trocador and NonLogs that is already in the quoted rate.
  • Identity: An optional Smirk username + your linked Nostr key (npub) are public — they back your name@smirk.cash handle. No username, no listing.
  • Messaging: Optional end-to-end encrypted DMs over Nostr. Relays (ours or public) carry only ciphertext they can't read; a relay we run keeps encrypted messages ~30 days.
  • Self-hostable: The v0.3 backend is open source — run your own and none of this backend data touches us.
    • @@ -250,11 +255,12 @@ export default function Privacy() {

    4. Third parties you choose to enable

    Some features connect you to independent third parties operated by others, - not by us — Trocador for swaps, the Electrum/Fulcrum servers noted above, - the public Nostr relays that carry optional messaging, the block explorers + not by us: Trocador, THORChain through Liquify's gateway, NonLogs (through + our backend), and Neroswap price lookups for swaps, the Electrum/Fulcrum servers + noted above, the public Nostr relays that carry optional messaging, the block explorers opened by "view on explorer" links, and any site you connect to - through the window.smirk interface. Because your device contacts - these endpoints directly, each can see your IP address alongside whatever the + through the window.smirk interface. Where your device contacts + these endpoints directly (everything except NonLogs), each can see your IP address alongside whatever the interaction entails — for a swap, the asset pair, amounts, and your destination and refund addresses; for an explorer, the transaction or address you open. Each has its own privacy policy. We neither control nor monitor @@ -291,8 +297,9 @@ export default function Privacy() { . We do not sell your data.

    - For data held by third parties you've used through Smirk (Trocador, node - operators, Electrum servers), contact those providers directly using the + For data held by third parties you've used through Smirk (Trocador, THORChain + and Liquify, NonLogs, Neroswap, node operators, Electrum servers), contact those + providers directly using the privacy contact in their respective policies.