Effective 2026-09-13
RouteCompare — Privacy Policy
Effective date: 13 September 2026 (version 2026-09-13.4)
1. Who we are
RouteCompare (“we”, “us”) operates https://routecompare.com (the “Site”), an independent comparison tool for moving stablecoins and ETH between blockchain networks. The Site is operated by a private individual, not a company, who is located in the United Arab Emirates. Contact for anything in this policy: hello@routecompare.com. The operator’s name and contact address are not published on the Site; they are provided on request to a person whose data we process or to a supervisory authority.
This policy forms part of our Terms of Service (https://routecompare.com/terms/).
2. The short version
- The Site has no accounts, no registration, no login and no identity checks. We do not know who you are.
- We do not store IP addresses, do not store wallet addresses and do not set cookies of our own.
- We keep a history of quotes (no personal data) and records of executed transfers: route, amount in USD, provider, transaction hash, quoted and actual outcome. A transaction hash is public on the blockchain and can be linked to a wallet by anyone with a block explorer.
- When you execute through Across or Relay, your wallet address is sent to our server once so that the provider you chose can build your transactions. We do not store or log it.
- We use Cloudflare (hosting, country detection), Plausible (cookie-less analytics on the production site) and Supabase (database). Backups go to Cloudflare R2.
- We do not sell personal data and do not use it for advertising profiles.
3. Data we process, why, and for how long
The table lists every processing activity of the Site. We do not process any other category of personal data.
| # | Activity | Data | Purpose | Legal basis (EEA/UK visitors) | Retention |
|---|---|---|---|---|---|
| 3.1 | Serving the Site (Cloudflare Pages and Workers) | IP address, request metadata (URL, headers, user agent, time), country derived from the IP address | Deliver pages and API responses; protect against attacks; apply the geographic rules described in the Terms (Section 8) using the country Cloudflare attaches to each request | Legitimate interests (running and securing the Site; complying with sanctions and provider rules) | We do not store IP addresses or request logs. Cloudflare processes them under its own policy (Section 6). |
| 3.2 | API rate limiting | IP address | Limit the number of requests to our quote API per minute | Legitimate interests (protecting the service) | Held in memory only, per server instance, for up to about one minute; never written to disk or a database |
| 3.3 | Analytics (Plausible, loaded only on the production site) | Aggregate page views and a few custom events (for example which provider’s button was opened, the route, the amount). Plausible states that it works without cookies and without collecting personal data; it processes the IP address and user agent transiently to count unique visitors and does not store them | Understand which pages and routes are used | Legitimate interests (measuring use of the Site) | Aggregated statistics only; we do not receive individual-level data. See Plausible’s data policy (Section 6). |
| 3.4 | Quote history | Route (networks, token, amount), provider, quoted amount, fee, estimated time, timestamp | Show how quotes change over time; our own aggregated data set | Not personal data | Kept indefinitely as aggregated data |
| 3.5 | Execution records | Route and its two networks, amount in USD, provider, transaction hash, quoted amount, quoted time, quote timestamp, our integrator fee in that transfer, and later the actual amount received, actual time and status; plus technical fields (when the record arrived, when the status was last checked, number of checks) | Compare quoted and actual outcomes per provider; detect problems; publish aggregated statistics. We do not store wallet addresses. | Legitimate interests (measuring provider accuracy; operating the service). The record is created when you execute a transfer through the Site. | Kept indefinitely as part of our aggregated data. See Section 4 on transaction hashes. |
| 3.6 | Across or Relay execution request | Your wallet address and the transfer parameters (networks, token, amount) | Our server sends them to the provider you chose (Across or Relay) so that it builds the approval and deposit transactions for your address; the page shows you the result for review | Performance of the contract with you (building the transfer you asked for) | Used for that single request. Not stored and not logged by us. That provider processes the address under its own policy (Section 6). |
| 3.7 | Pending execution reports in your browser (local storage) | Transaction hash and the quoted numbers of a transfer you signed. No wallet address. | If a report of an executed transfer fails to reach our server, the page keeps it in your browser and retries on your next visit | Legitimate interests (completing the execution record) | In your browser only: at most 5 entries; each deleted after 7 days or once delivered |
| 3.8 | Consent record in your browser (local storage) | The version of the Terms and Privacy Policy you agreed to and the time of agreement | Remember that you gave the express consent required before executing a transfer, so you are not asked on every visit; ask again when the documents change | Legitimate interests (evidence of agreement; not asking repeatedly) | In your browser only, until the document version changes or you clear your browser storage. Not sent to us. |
| 3.9 | Email (hello@routecompare.com, forwarded via Cloudflare Email Routing) | Your email address, name if you give it, and the content of your message | Answer your message; handle requests under Section 8; handle disputes and opt-outs under the Terms | Legitimate interests (responding to you); legal obligation where a request is made under data-protection law | Kept as ordinary email correspondence for 24 months after the last message in the thread; 6 years where the correspondence concerns a dispute, an arbitration opt-out, or a request under Section 8 |
| 3.10 | Backups | Copies of the data in 3.4 and 3.5: hourly files of raw quotes, and a daily snapshot of the tables holding daily statistics and execution records. No IP addresses and no wallet addresses | Restore the database after loss | Same as the underlying data | Stored in Cloudflare R2. Raw-quote files are kept as quote history; daily snapshots are deleted after 30 days, except the snapshot of the first day of each month, which is kept indefinitely |
We do not process special categories of personal data, and we do not carry out profiling or automated decision-making that produces legal or similarly significant effects on you.
4. Transaction hashes and the public blockchain
When you execute a transfer, the transaction is recorded on public blockchains. Its hash, the sending and receiving addresses, the token, the amount, the fees and the time are public and permanent. Anyone can look up a transaction hash in a block explorer and see the wallet address that signed it. We store the transaction hash in our execution records (row 3.5) but not the wallet address. Because the hash can be linked back to a wallet by anyone, a hash may be personal data in relation to you even though we do not hold your address. We cannot delete or alter anything on a blockchain.
5. Cookies and local storage
- Our own code sets no cookies.
- Our code uses your browser’s local storage only for rows 3.7 and 3.8. Nothing in local storage is sent to us except the pending execution report (3.7), which contains no wallet address.
- Third-party components on the page — the LI.FI widget and your wallet extension — may use their own cookies or storage. They are controlled by those third parties, not by us, and are governed by their policies (Section 6).
- Plausible states that it does not use cookies.
6. Third parties
6.1 Processors and infrastructure we use
| Provider | Role | Their policy |
|---|---|---|
| Cloudflare, Inc. | Hosting and delivery (Pages, Workers), country detection, email forwarding (Email Routing), backups (R2) | https://www.cloudflare.com/privacypolicy/ |
| Plausible Insights OÜ | Cookie-less analytics on the production site | https://plausible.io/data-policy |
| Supabase, Inc. | Hosted PostgreSQL database holding quote history and execution records | https://supabase.com/privacy |
6.2 Third parties you interact with directly
When you execute a transfer or follow a link, you deal with these parties directly. We do not control them, and their own terms and privacy policies apply:
| Party | When | Their policy |
|---|---|---|
| Your wallet software | Connecting a wallet, signing transactions | The wallet’s own policy |
| LI.FI Service GmbH | Using the LI.FI widget on the page | https://li.fi/legal/privacy-policy/ |
| Risk Labs (Across) | Executing through Across (we send your wallet address and transfer parameters to Across, row 3.6); Across also processes your interaction with its contracts and its own website | https://across.to/privacy-policy |
| Uneven Labs, Inc. (Relay) | Executing through Relay (we send your wallet address, as sender, recipient and refund address, and the transfer parameters to Relay, row 3.6); Relay may also collect on-chain data related to that address, including your transactions and token balances | https://relay.link/privacy-policy |
| The bridges, relayers and blockchain networks used by a provider | Every transfer | Their own policies, where they have any |
| Binance, Bybit, OKX | Following an exchange link from the Site (a referral link where shown) | The exchange’s own policy |
We do not share personal data with any other third party, and we do not share data with third parties for their marketing purposes. We may disclose data if required by law or to establish, exercise or defend legal claims.
7. International transfers
- The Site is served by Cloudflare from data centres around the world, close to the visitor.
- The operator accesses the database, backups and email from the United Arab Emirates, which has no adequacy decision from the European Commission or the UK Government.
- Our database (Supabase) is hosted in the United States (East US region). It holds quote history and execution records only — no IP addresses, no wallet addresses.
- Cloudflare and Plausible may process data in the United States or other countries under their own transfer mechanisms (standard contractual clauses and, for the US, the EU–US Data Privacy Framework where the provider is certified). Plausible states that its analytics data is hosted in the EU. See their policies in Section 6.1.
- Across (Risk Labs) is based in the Cayman Islands and processes the wallet address you submit for execution there and in other countries under its own policy.
- Relay (Uneven Labs, Inc., a Delaware corporation, United States) processes the wallet address you submit for execution under its own policy; where it processes it is set out in that policy, not by us.
8. Your rights
If you are in the EEA or the UK you have the right to ask us for access to, rectification or erasure of your personal data, to restrict or object to its processing, to data portability, and to complain to a supervisory authority (in the UK, the Information Commissioner’s Office; in the EEA, the authority of the country where you live). Where we rely on legitimate interests you may object at any time. Visitors elsewhere may have similar rights under their local law and may exercise them in the same way.
How to exercise them: email hello@routecompare.com. We answer within one month, extendable where the law allows.
What we can and cannot do. Because the Site has no accounts and stores neither IP addresses nor wallet addresses, in most cases we hold nothing that we can link to you. The exceptions are:
- Email: we can delete correspondence with you on request, unless we need to keep it for a legal claim.
- Transaction hashes: if you tell us a transaction hash, we can delete the corresponding execution record. We may ask you to show that you control the wallet (for example by signing a message) before deleting a record that is linked to it. We cannot remove anything from the blockchain.
We will not discriminate against you for exercising your rights.
9. Children
The Site is not directed at children. Under our Terms you must be at least the age of majority where you live to use it. We do not knowingly process personal data of children; because we hold no identifying data, we cannot verify age. If you believe a child has executed a transfer through the Site, contact us and we will delete the execution record.
10. Security
Our API keys and database credentials are held only on our servers and are never included in the pages served to your browser. Traffic to the Site is encrypted (HTTPS). The rate limiter holds IP addresses in memory only. Execution records contain no wallet address. No system is completely secure, and we cannot guarantee the security of data in transit over the internet or of third-party services. Your wallet, keys and seed phrase are under your control alone; we never ask for them, and nobody claiming to be RouteCompare should.
11. Changes to this policy
We may change this policy by publishing the updated version on the Site with a new effective date. If a change means you must agree again before executing a transfer, the Site will ask you. Material changes are announced on the Site for a reasonable period.
12. Contact
RouteCompare · hello@routecompare.com · https://routecompare.com
We have not appointed a representative in the European Union or the United Kingdom: the personal data we process is limited to voluntary email correspondence and pseudonymous transaction hashes, which we consider occasional processing that is unlikely to result in a risk to your rights and freedoms.