Privacy Policy

1. Introduction

SwiftNodes ("we", "our", "us") operates the swiftnodes.io website and RPC proxy service. This privacy policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Account Data: You sign in with either an Ethereum wallet or an email address. We store the wallet address or email address as your account identifier. If you use email sign-in, we send one-time login codes to that address. We do not ask for your name unless you add billing details.

Sign-in Records: For account security and abuse prevention, we record the IP address and browser user agent of each sign-in and of account creation, and keep them while your account exists.

Billing Details: If you add billing details for invoices (such as a name, company or address), we store them with your account.

API Usage Data: We log API key usage including request counts, chains accessed, and timestamps. This data is used for rate limiting and usage analytics displayed in your dashboard.

RPC Request Data: RPC requests are proxied to upstream blockchain nodes. We do not store the content of your RPC requests or responses: parameters and results pass through our servers but are not logged or retained, except as described under Request Log.

Request Log: So you can debug failures from your dashboard, we keep a short log of recent HTTP calls per API key: the time, chain, JSON-RPC method name, HTTP status, response time, and the error message of any call that failed, cut to 200 characters. An upstream node's error message can quote part of the call, such as an address. Busy keys keep a sample. The log holds at most the newest 500 calls per key and is deleted after 7 days. You can turn it off for any key in the dashboard, which also deletes what was kept.

Payment Data: Crypto payments are processed on-chain; we record transaction hashes and amounts for subscription management. Card payments are processed by Stripe; we receive a Stripe customer reference and payment status, never your card number. We do not have access to your private keys or wallet funds.

Website Analytics: We measure visits to swiftnodes.io with our own first-party analytics, without cookies or any other storage in your browser. Each page view records the page, the referring site, campaign tags in the link (utm_*), your country (derived from your IP address at the time of the request), device type, browser, operating system, language, screen width and time on page. To count unique visitors, we compute an identifier by hashing your IP address and browser user agent with a random value that changes every day and is deleted after 48 hours. We never store your IP address for analytics, and the identifier cannot be linked to you on a different day. If you create an account, the pages you visited earlier that same day are linked to your new account, so we can understand how people find the service. We also store the first page you visited and the site that referred you, kept in your browser's local storage until you sign up.

3. How We Use Your Information

• To provide and maintain our RPC proxy service
• To enforce rate limits based on your subscription plan
• To display usage statistics in your dashboard
• To process subscription payments
• To monitor service health and performance
• To protect accounts and prevent abuse
• To understand how visitors find and use the website

4. Data Sharing

We do not sell, trade, or rent your information to third parties. Your RPC requests are forwarded to public blockchain nodes to fulfill your requests — this is the core function of the service. No personal data is shared with these upstream providers.

We use a small number of service providers to run the service: Stripe (card payments), Resend (sending login codes and account emails) and Cloudflare (hosting the website). They process data only to provide their service to us. We do not use third-party analytics or advertising trackers.

5. Data Retention

Account data (wallet or email address, API keys, sign-in records, billing details) is retained as long as your account exists. Usage logs are retained for 90 days. Request logs are deleted after 7 days. Website analytics events are deleted after 400 days. You can request deletion of your account data by contacting us.

6. Security

We use industry-standard security measures including encrypted connections (TLS/SSL), access controls, and secure infrastructure. API keys are generated using cryptographically secure random values.

7. Cookies and Local Storage

We do not use cookies. When you sign in, a session token is stored in your browser's local storage for authentication. Before you sign up, local storage also holds the first page you visited and the referring site, which are sent with your sign-up. Our website analytics store nothing in your browser.

8. No IP Logging on RPC Requests

We do not log IP addresses associated with RPC requests. Your blockchain interactions through our service are not tracked or correlated with your identity beyond the API key used.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

10. Contact

For privacy-related questions, contact us at privacy@swiftnodes.io.