Privacy Policy

Last updated: 2026-05-10

1. Overview

Libermall DEX ("Libermall", "we", "us") operates a non-custodial decentralized exchange interface at dex.libermall.com for the TON blockchain. The service is operated by Libermall LLC, a limited liability company registered in Wyoming, United States. We do not hold your funds, private keys, or seed phrases at any time. This Privacy Policy describes the limited categories of information we may process and how we protect them.

2. Information We Collect

Public on-chain data. All swap, liquidity, and staking transactions occur on the TON blockchain and are permanently public. We do not control or own this data.

Public wallet addresses. When you connect a wallet via TonConnect, the wallet shares your public TON address with our frontend so we can display balances and route transactions. We do not receive or store private keys, mnemonics, or seed phrases.

Telegram identifiers (optional). If you bind a Telegram account via our @LibermallDEXbot, we store your Telegram numeric ID, username, and the connected TON address pairing — solely to deliver notifications and authenticate the bind. You may unbind at any time in /account.

Server logs. Our edge proxy (Cloudflare) and origin server log standard request metadata (IP, User-Agent, timestamps, requested path) for security and abuse prevention. Logs are retained for up to 30 days unless required for an active investigation.

Anonymous error reports. Frontend errors are sent to Sentry (sentry.io) with stack traces, URL, and a randomly generated session ID. We strip personally identifying parameters before sending.

Local storage / cookies. We use browser localStorage for theme preference, language, and a short-lived sign-in JWT (when you authenticate to view your account). We do not use third-party advertising or cross-site tracking cookies.

3. How We Use Information

  • To render your wallet balances and transaction history (fetched directly from the TON blockchain)
  • To compute swap quotes and route transactions through Libermall pools or the Omniston aggregator
  • To deliver notifications you opted into (Telegram bind)
  • To monitor performance, debug crashes, and prevent abuse
  • To comply with applicable legal obligations and respond to lawful requests

4. Third-Party Services

TON Blockchain & TonConnect. All transactions execute on a public ledger. Your wallet provider (Tonkeeper, MyTonWallet, etc.) governs your private keys.

STON.fi / Omniston. When you select the Aggregator route, your swap parameters (input asset, output asset, amount) are sent to STON.fi's Omniston API to compute optimal routing. Refer to STON.fi's privacy policy for their data practices.

Cloudflare. We use Cloudflare for DNS, CDN, and DDoS protection. Cloudflare may process your IP and User-Agent under their own privacy policy.

Sentry. Error monitoring (anonymized stack traces only). See sentry.io/privacy.

Token logo CDN proxy. We re-proxy third-party token-icon images through /api/site/tokens/logo with a 24-hour disk cache so we don't leak your IP to those CDNs.

5. Geographic Restrictions

Libermall DEX is not available to residents or persons located in the United States or in any country/region subject to comprehensive US sanctions (currently including but not limited to: Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, Luhansk, Kherson, and Zaporizhzhia regions). By using the platform, you represent that you are not a US Person and not located in any of the above jurisdictions. We may employ technical measures (geo-IP filtering, KYC for premium features) to enforce this.

6. Children's Privacy

Libermall DEX is not directed to anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has used our service, contact us and we will take reasonable steps to remove the data.

7. Your Rights

EU / EEA / UK (GDPR). You have the right to access, correct, delete (where applicable), restrict processing of, and port your personal data. You may also lodge a complaint with your national data protection authority. To exercise these rights, contact us at [email protected].

California (CCPA/CPRA). California residents may request the categories and specific pieces of personal information we hold, request deletion, and opt out of any sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising.

Limitations. Blockchain transactions are immutable and cannot be deleted by us or anyone else. We cannot alter or remove on-chain data.

8. Data Security

Because Libermall DEX is non-custodial, your assets and private keys never reach our servers. Our frontend infrastructure is hosted with industry-standard security controls (TLS, hardened OS, least-privilege access, signed releases, audit logs). However, no internet service is perfectly secure; you assume residual risk by using the platform.

9. International Data Transfers

Our infrastructure is hosted in the European Union (Hetzner, Fornex). Cloudflare may route requests through edge nodes globally. By using the service you consent to such transfers, performed under appropriate safeguards (Standard Contractual Clauses where required).

10. Changes to This Policy

We may update this Privacy Policy as the platform evolves or laws change. Material changes will be announced via our official channels and the "Last updated" date above will be revised. Continued use of Libermall DEX after such changes constitutes acceptance.

11. Contact

For privacy questions, data subject requests, or compliance inquiries: [email protected]. For general support, see our official Telegram channel.