Privacy Policy

Last updated: 2 June 2026 · EU Regulation 2016/679 (GDPR). The legally binding version is the German privacy notice; this is a courtesy translation.

1. Controller

Mario Hauser
Selchowstrasse 15
12489 Berlin
Germany
Email: seekerbridge@proton.me

2. Scope

This policy applies to the website seekerbridge.app and all of its subpages, as well as to the Android application seekerbridge (together "the Service").

3. General principles

seekerbridge is designed as a non-custodial swap aggregator. No user account is required; we do not actively collect personal master data such as your name, email, or phone number. Data is only processed to the extent technically necessary for the respective service.

4. Data processing when visiting the website

4.1 Server logs (hosting)

The website is hosted on servers operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. On each request, the hosting provider processes server logs which may include:

IP address of the requesting device (anonymised after 7 days)
Date and time of access
Requested URL and HTTP method
HTTP status code and bytes transferred
Referrer URL
User-Agent (browser and OS)

Purpose and legal basis: operation, stability and security of the web server, prevention of abuse. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a functional, secure server).

Retention: logs are kept for a maximum of 7 days and then automatically deleted. In documented security incidents, retention may be extended in individual cases.

A data processing agreement under Art. 28 GDPR is in place with Hetzner.

4.2 Cookies and local storage

The website uses no tracking, advertising, or analytics cookies. Only strictly necessary values are stored in your browser's localStorage to remember your language choice (EN/DE) and the dismissal of the cookie notice. These values never leave your device. Legal basis: Art. 6 (1) (f) GDPR and § 25 (2) (2) TTDSG.

4.3 Fonts

This site loads the "Inter" typeface from Google Fonts (Google Ireland Limited, Dublin). Loading transmits your IP address to Google servers. Google processes the data under its own privacy policy (policies.google.com/privacy). Legal basis: Art. 6 (1) (f) GDPR.

5. Data processing in the Android app

5.1 Data processed locally on your device

The seekerbridge Android app stores the following only on your device:

Your swap history (Changelly transaction ID, selected coins, amounts, timestamps, status)
Payout and refund addresses you have entered (in the app's address book)
Local app settings (language, notification preferences)

This data is stored in a local database (Room/SQLite) on your device and is transmitted to no one. It is deleted when you uninstall the app.

5.2 Data sent to our backend server

For the app to function, our backend (api.seekerbridge.app, hosted with Hetzner) processes the following per swap:

Selected coins (e.g. BTC, SOL)
Swap amounts
Your payout and, if provided, refund address
Changelly transaction ID (once issued by Changelly)
Transaction status
Device-specific push token (only if notifications are enabled)

We do not link this data to your person — our backend does not know your real name or email address.

Legal basis: Art. 6 (1) (b) GDPR (contract performance — the data is necessary to provide the swap service).

Retention: swap records are kept for a maximum of 12 months (for support and compliance purposes), then deleted automatically.

5.3 Transfer to Changelly

The actual crypto swap is performed by our partner:

Changelly OÜ
Sepapaja tn 6, Lasnamäe linnaosa
11415 Tallinn, Estonia
changelly.com/policy

For each swap we transmit to Changelly:

Selected coins, amounts and rate type (floating/fixed)
Your payout and, if provided, refund address
For AML purposes, Changelly may screen the deposit address on-chain at its own discretion. For this, Changelly acts as an independent controller under Art. 4 (7) GDPR.

Legal basis: Art. 6 (1) (b) GDPR (contract performance).

Changelly is to be considered an independent controller, as processing happens under its own responsibility and its own AML/KYC framework. See Changelly's privacy policy at changelly.com/policy.

5.4 Push notifications

If you opt in to push notifications, swap status updates are delivered via Google Firebase Cloud Messaging (FCM), a service of Google Ireland Limited. The push payload contains no personal data, only the swap ID and the new status (e.g. "Confirming"). Legal basis: Art. 6 (1) (a) GDPR (consent, withdrawable any time in app settings).

6. Recipients of data

Hetzner Online GmbH (backend and website hosting) — processor under Art. 28 GDPR
Changelly OÜ (swap execution) — independent controller
Google Ireland Limited (FCM, Google Fonts) — only when notifications are active or the site is visited
Law enforcement upon legally binding order

7. Third-country transfers

Transfers to countries outside the EU/EEA only occur to Google (FCM, Google Fonts). EU Standard Contractual Clauses serve as the safeguard under Art. 46 (2) (c) GDPR.

8. Your rights

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing based on legitimate interests (Art. 21 GDPR)
Right to withdraw consent with future effect (Art. 7 (3) GDPR)

To exercise these rights, simply email seekerbridge@proton.me.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. The competent authority for the provider is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin, Germany
datenschutz-berlin.de

10. Retention summary

Website server logs: max. 7 days
Backend swap data: max. 12 months
Local app data: until uninstall or manual deletion
Data at Changelly: per Changelly's own privacy policy

11. Changes to this policy

We reserve the right to update this policy when changes to the Service or applicable law require it. The current version is always available on this page.