What we never collect

No account, no email, no phone number, no identity document, no KYC. No advertising pixels, no session replay, no third-party behavioural analytics. Logs and metrics are built to exclude Monero addresses, keys and user IPs, so there is no profile of you anywhere in the stack.

What never leaves your device

Your EVM transactions are signed by your own wallet. Your Monero wallet, its keys and your recovery state live in the local swap engine on your machine. Your XMR destination is handed to your loopback agent only — it never reaches the Harpocrates gateway. No seed phrase or private key is ever requested or transmitted.

How Monero settlement works

The XMR leg settles as native Monero — not a wrapped or bridged token. Ring signatures, stealth addresses and confidential amounts are applied by Monero itself, so the coins you receive carry Monero's own protocol-level anonymity from the moment they land in a wallet only you control.

Nothing to hand over

Harpocrates holds no custody, no keys and no identity records. There is no account database to breach and nothing linking a swap to a person waiting to be requested by anyone.

Staying anonymous: practical tips

Anonymity is strongest when your own habits match it. Use a fresh EVM wallet for swapping rather than one already tied to an exchange account. Avoid reusing the same addresses across swaps. Point the stack at your own Monero node and RPC endpoint when you can, and treat your network path the way you treat your keys.