TIRIO / LEGAL

Privacy Policy

Last updated

This policy explains what data Tirio Labs ("Tirio", "we") processes when you use tirio.io, the swap and trade app on it and the public API at api.tirio.io.

In short

  • There are no Tirio accounts. We do not ask for your name, email address or any other personal details.
  • The site uses no analytics, no advertising trackers and no telemetry, and it sets no cookies of its own.
  • Your IP address is used only to rate-limit requests to the API. It is held in the API server's memory and not written to our logs.
  • The API's logs record the parameters of requests, such as the tokens, amounts and partner. Logs are rotated and typically cover a few days.
  • Blockchain transactions are public by nature. Anything you do on chain can be seen by anyone, permanently.

What we process

Wallet addresses. When you connect a wallet, the app uses its address in your browser to show your balances and orders and sends it to the API with quotes and order requests, as the sender and recipient of the transaction. Your wallet address and your transactions are public on the blockchain.

API requests. Every request to the API, from the app or from your own code, carries its parameters: for example the tokens, the amounts, the slippage, the sender and recipient addresses, a partner address and fee, and an integration tag. The API uses them to answer the request. Its logs record request parameters such as the chain, the tokens, the amounts, the partner and the integration tag, together with timing information, to operate the Service, investigate errors and measure performance.

How long logs are kept. Server logs are rotated by size: at most about 150 MB is kept per service, and older entries are overwritten. That typically covers a few days, depending on traffic.

IP address. The API counts requests per IP address to enforce its rate limit (10 requests per second). The counter lives only in the server's memory and is not logged or shared.

Data stored in your browser. The app keeps your last-used wallet and your wallet connection state in your browser's local storage so that it can reconnect. This data stays on your device; you can clear it in your browser at any time.

Third parties that see data

  • Cloudflare. The site and the API are served through Cloudflare, which processes connection data such as your IP address to deliver the traffic and protect it from abuse, under Cloudflare's own privacy policy. Cloudflare may set strictly necessary security cookies.
  • Hosting. The website and the API run on a server rented from a cloud hosting provider.
  • Wallet connections. If you connect with WalletConnect, the connection is relayed through the WalletConnect network operated by Reown, which sees connection metadata. If you connect with Coinbase Wallet without the extension, the Coinbase Wallet SDK handles the connection. Browser extension wallets connect inside your browser. Each wallet provider processes data under its own policy.
  • Public RPC endpoints. Your browser reads balances and simulates transactions through public BNB Chain RPC endpoints (bsc-dataseed.bnbchain.org and bsc-dataseed1.defibit.io), which see your IP address and the addresses and transactions queried. Your wallet sends your transactions through its own RPC endpoint.
  • GeckoTerminal. Chart history, older trades and token market data on the trade page are requested by Tirio's server from GeckoTerminal using public pool and token addresses only. Your browser does not contact GeckoTerminal and your IP address and wallet are not passed on.
  • Token logos. Token logos are loaded by your browser directly from the hosts named in the token list, for example PancakeSwap's and Trust Wallet's asset hosts, which see your IP address.
  • Block explorers. Links to transactions and addresses open on BscScan, which processes your visit under its own policy.

We do not sell your data and we do not share it for advertising.

Why we process it

To provide the Service (routing, quotes, transactions, orders, charts), to protect it from abuse, to investigate errors and to measure and improve performance.

Your choices and rights

You can use the app without connecting a wallet to browse prices, and you can use the API without any account. Depending on where you live, you may have rights to access, correct or delete personal data or to object to its processing; contact us to exercise them. We cannot change or delete data recorded on a blockchain.

Children

The Service is not intended for anyone under the legal age to use it where they live.

Changes

We may update this policy. The date at the top of this page shows the latest version.

Contact

Contact Tirio through the channels listed on this site. See also the Terms of Use and the Risk Disclosure.