Why claim to be No-KYC if that isn't true?

FAQ: "Is KYC (Know Your Customer) required?" - "No KYC is required… OrbitSwap respects your privacy"

Terms, 6 AML/KYC Policy
KYC may still be required in some cases (...large or suspicious transactions).

The threshold for "large transactions" isn't specified in numbers or equivalent value, so users can't know in advance whether they'll be asked to undergo verification. The terms don't say which documents are required or how long the review takes. Most importantly, this clause directly contradicts the service's public No-KYC claims.

Privacy Policy, 2 Information We Collect
The service collects wallet addresses, amounts, transaction IDs, timestamps, browser type and version, operating system, IP address, device type, and referral source.

Privacy Policy, 3 Information We Don't Collect
The list of information they say they don't collect - such as names, addresses, phone numbers, banking details, and biometric data - includes this caveat: "Government-issued identification (except when legally required for AML compliance)". In other words, the exception is built right into the list of things they claim not to collect.

Privacy Policy, 5 Cookies
Analytics cookies are described as "aggregated and anonymous". But the site uses Google Analytics, a third-party analytics service that processes IP addresses by default. So the claim that the analytics are completely anonymous seems optimistic.

Privacy Policy, 7 Information Sharing
Information may be shared with "service providers" when required by law, court order, or government request, for security purposes, and in connection with "business transfers" such as a merger, acquisition or asset sale.

Privacy Policy, 8 Data Retention
Transaction data is kept for 5 years, technical logs are automatically deleted after 30 days, and support requests are kept for 1 year.

The Terms page says "Last updated: January 7, 2026" but the domain was registered on June 12, 2026.

https://web.archive.org/web/20261010183818/https://orbitswap.io/terms
https://web.archive.org/web/20261012103438/https://orbitswap.io/privacy
https://web.archive.org/web/20261012103956/https://orbitswap.io/about

Your exchange has nothing to do with privacy. You're just a regular exchange built on a third-party API.

They do have this:


If the money were refunded in all cases, I wouldn't see a major problem.

The problem is this part "Report suspicious activities to relevant authorities" which implies authorities can tell them to retain the coins. Will they deny? Of course not.