Privacy Policy

Last updated: 06.10.2026

1. Data we process

• Discord identity: your Discord user ID, username, and avatar, from Discord login (scope identify only) and from your use of the bot. We do not receive your e-mail address, your servers, or your messages outside the deal threads.
• Deal data: the terms you enter, amounts, the Litecoin addresses you provide, deposit and payout transaction IDs, timestamps, and status changes.
• Dispute data: reasons and statements you submit, and moderator decisions.
• Deal conversations: the messages in the private deal thread are saved as a transcript when a dispute opens and when the deal ends, so that the staff can check what happened if there is a problem.
• Profile data: the bio and banner link you add, and the reviews and replies you write.
• Technical data: a session cookie (strictly necessary, valid 12 hours, renewed while you use the site) and short-lived security logs. No advertising or tracking cookies are used.

Discord access tokens are used once to read your profile at login and then revoked; they are never stored. Onyx never asks for passwords, private keys, or seed phrases.

2. Why we process it

• To provide the escrow service you use.
• For security, fraud prevention, and the audit log of every deal.
• To keep the records we are required to keep.

3. Public information

Your public profile shows your username, avatar, bio, banner, the date you joined Onyx, the number and volume of completed deals, dispute outcomes, and approved reviews. Litecoin transactions are public on the blockchain by design.

4. Who sees your data

Your counterparty and the moderators see the deal data; deal transcripts are visible to the staff only. Service providers: Discord (bot and login), the hosting provider, the blockchain data provider (it sees the deposit addresses we query), and public exchange-rate services (no personal data).

5. Retention

• Financial and audit records of deals are kept for 10 years and then anonymized.
• The audit log stores no names: it refers to internal user numbers, so anonymizing your account anonymizes your history.
• Sessions expire automatically; security logs are kept only for a short time.

6. Your rights

On the Account page you can download all your data and delete your account. Deleting it immediately removes your name, avatar, Discord ID, bio, banner, and the text of your reviews; records we must keep are retained for the period above and then anonymized. For any other request, contact the staff on the Discord server.

7. Security

Funds are held in a wallet whose keys never leave the signing component; secrets are never logged; all actions are recorded in a tamper-evident audit log. No system is perfectly secure; if a breach affects your data, we will inform you.

8. Changes

We will publish changes on this page.