Privacy Policy

// 1. Operator

NUKE//CRYPT is operated by Nuclear Cryptography & Anonymity Ltd., an International Business Company registered in the Republic of Seychelles (IBC No. 23-7711). The legal seat is at Suite 11, Eden Plaza, Eden Island, Mahé, Seychelles.

// 2. Data minimisation

By design, NUKE//CRYPT collects the smallest possible amount of data that allows us to deliver an access token:

• An optional operator alias chosen by you at checkout.
• An optional contact email address (kept in plaintext only until delivery, then redacted).
• The cryptocurrency you paid in (BTC, LTC, XMR) and — for BTC and LTC only — the on-chain TXID.
• An ephemeral session cookie for the operator panel (nk.sid), set only when an administrator signs in.

We do not collect IP addresses, browser fingerprints, device IDs, or any payment metadata beyond the on-chain TXID. We do not deploy analytics, telemetry or third-party trackers.

// 3. Network traffic

The relays themselves run from RAM-only filesystems. There is no syslog, tcpdump, or NetFlow exporter. Each reboot wipes the entire short-term state. We cannot, technically, hand over a record of which sites you visited because that record does not exist.

// 4. Cryptocurrency disclosures

Bitcoin and Litecoin transactions are public and pseudonymous; any third party can correlate the on-chain TXID we store with your wallet’s history. If your threat model requires unlinkable payments, use Monero (XMR) — manual confirmation is the price of absolute opacity.

// 5. Lawful basis (GDPR Art. 6)

Where European data-subject rights apply, the lawful basis for processing your alias and TXID is the performance of a contract — Art. 6(1)(b). The optional contact email is processed under your explicit consent — Art. 6(1)(a) — which you may withdraw at any time by writing to privacy@nuke-crypt.example.

// 6. Retention

Order records are retained for 30 days past expiry of your access token, then permanently deleted. The on-chain TXID is hashed after 90 days, with the original destroyed. Operator-panel logs are pruned every 24 hours.

// 7. Disclosure to authorities

The Republic of Seychelles is not a signatory to mutual-legal-assistance treaties covering compelled disclosure of metadata for traffic-encryption services. We will not voluntarily disclose data to any government, intelligence agency or commercial third party. We have not received a national security letter; the disappearance of this sentence in any future revision should be treated as a warrant-canary signal.

// 8. Cookies and trackers

The public site uses zero cookies, zero local-storage entries, and zero third-party scripts. The operator panel sets one HTTP-only session cookie strictly for authentication.

// 9. Your rights

You may request access to, rectification of, or erasure of any personal data we hold about you. Because we hold almost none, the typical answer is a copy of your order record and a hash of your TXID. Submit requests in writing, signed with our PGP key D5BA 7710 …, to privacy@nuke-crypt.example.

// 10. Changes

This policy may be amended for legal or operational reasons. Material changes are advertised on the public site for at least 30 days before they take effect. The previous version is archived on the canary page.