Privacy Policy
KYCHunter is built to collect as little as possible. This page explains exactly what is processed when you use the site, and what is not.
In short
- No accounts, no third-party scripts or trackers, no advertising, and no cookies on the public site.
- We keep anonymous visitor statistics as daily totals only. No IP address or identifier is stored, and you cannot be followed from one day to the next.
- Links to listed services go straight to them. We do not add tracking to your visit.
- Our web server keeps standard access logs, described below.
When you browse and search
The site works without JavaScript and loads no third-party scripts, fonts or trackers. All scripts, fonts and images, including the logos of listed services, are served from kychunter.com. The public site sets no cookies. Search, filters and sorting run in your browser, or on our server if JavaScript is off. The coin prices in the bar at the bottom of each page are fetched by our server from a public price service (CoinGecko, or Kraken as a fallback); your browser only asks our server for them, so those services never see your visit. To show the opening screen only once per visit, your browser keeps one flag in its session storage; it never leaves your browser and is gone when you close the tab.
When you follow a link to a listed service, you leave KYCHunter. We ask your browser not to send the address of our page to that service. From then on, that service's own privacy policy applies.
Anonymous statistics
To see how the site is used, our own server counts visits as daily totals: the number of visitors and page views, which pages were viewed, which listings were opened, the search words used, the website that linked to us (only its domain name), and general browser, operating system, device type and language. Obvious bots are not counted.
To count each visitor only once per day, the server combines your IP address and user agent with a random key and keeps a one-way hash of the result. The key and all of that day's hashes are deleted at the end of the day (UTC), so a visit today cannot be linked to a visit on another day, and the hash cannot be turned back into your IP address. Your IP address is never written to the statistics. There are no cookies, no fingerprinting scripts and no third-party analytics services. When JavaScript is on, the site's own script tells the server which listing you opened and what you searched for, without any identifier. The daily totals are kept for up to two years.
Web server logs
Like most websites, our web server writes an access log for security and troubleshooting. Each entry contains your IP address, the date and time, the address of the page you requested (which for a search includes the search words), your browser's user agent and language headers, and the response status. These logs are not used for statistics or profiling, are not shared, and are kept only for a limited time for security purposes before they are deleted.
When you submit an exchange
If you use "Submit", we store what you enter (exchange name, website, how it works, descriptions, features, KYC score and your Telegram, SimpleX or email contact) so we can review it and contact you. We keep it until the review is done or you ask us to delete it. We do not store your IP address with it. To prevent abuse, the number of submissions from each IP address is counted in memory for up to one hour and never written to disk.
Site administration
The admin area uses a session cookie that is strictly necessary for signing in. It is only set for people who sign in to it. The admin activity log records administrators' IP addresses, never visitors'.
Security
The site is served over HTTPS only. No system is perfectly secure, and we cannot guarantee the security of data sent over the internet.
Your rights
Depending on where you live, you may have the right to access, correct or delete personal data we hold about you, or to object to its processing. Because we hold very little and cannot link server log entries to a person, we may need details (such as the time of your visit) to help. Requests about data a listed service holds must go to that service.
Changes
We may update this policy by posting a new version on this page with a new date.
Contact
Privacy questions or requests: contact our support channels listed on the site.