Good questions, let me take them one by one.
1. What's a "standard swap"?It's the normal one that goes through without being flagged, which is the vast majority. We don't ask anyone for KYC ourselves. The only time verification comes up is when the liquidity behind the swap flags the incoming funds, think coins coming straight from a hack, a scam, or a sanctioned source. If that happens and you'd rather not verify, you get the funds back without KYC. More on when and why that happens here:
why some swaps get flagged.
2. The deposit address and "holding funds".Fair point, so let me be precise. The deposit address isn't ours and it isn't a NoxSwap wallet, it's generated by the exchange that actually fills your order. Your coins go from your wallet, through the swap, and land back in your wallet. We never take custody at any point. You're right that the coins sit for a few minutes while the swap runs, that's unavoidable for any swap that isn't atomic, but that's the swap engine doing its job, not us holding your money.
3. Why 90 days and not 7?It's a support buffer, nothing more. If a swap gets stuck, a refund runs slow, or the provider reviews something, that can surface a week or two later. With a 7-day window, someone who comes back on day 10 has no record left and we can't help them. After 90 days there's no support reason to keep it, so the order is stripped of anything identifying. We keep no IP at all, and that 90 days only covers the order itself: pair, amounts, addresses, timestamps.
And to be straight with you: the exchange that fills the swap keeps its own records under its AML rules, which is outside our hands. The 90 days is about what
we keep.
Honestly? We built this for ourselves first. We just wanted a swap that doesn't ask who we are, doesn't sit on our coins, and doesn't keep a diary of everything we do. Once it actually worked, it felt like a waste to keep it to ourselves, so we opened it up to everyone.
