Privacy & security

Who controls each step#

Your wallet signs funding, swap and staking transactions. Null Cash does not need your seed phrase or private key. Do not paste either into the website, an order receipt or a support chat.

During a provider exchange, funds sent to an order address are processed by the route operator. This is different from a wallet-only Uniswap transaction. A multi-step route moves between these two types of execution; review each step before signing or sending.

Staking transfers the selected tokens into an on-chain escrow until its lock conditions are met. It does not keep those tokens spendable in your wallet during the lock.

What the route can see#

Provider requests include the selected tokens, networks, amounts and relevant receiving and refund addresses. The request IP can also be passed to the provider where its API requires it. Providers can apply their own availability and verification checks.

Blockchain transactions remain public. Funding a provider order does not erase the source transaction or make the receiving transfer invisible. Null Cash does not guarantee anonymity, an AML outcome or a particular exchange label as the source of funds.

Browser and server recovery data#

The browser retains the current exchange reference and route progress in session storage. Staking confirmation recovery uses local storage scoped to the wallet and escrow. Downloaded receipts are files you are responsible for keeping private.

The server keeps order-creation records to prevent duplicate provider requests and recover uncertain responses. Those records have a seven-day retention window and are cleaned up during later order creation. This is not a statement about the provider’s own retention or infrastructure logs.

Clearing browser storage can remove convenient recovery information without cancelling a transaction. Save the order ID and transaction hashes first.

Check what you approve#

• Open the official domain, nullcash.app, and verify the network in the wallet prompt.
• Check the token, amount, spender and receiving address for each action.
• An approval is permission for a contract to spend tokens. It is distinct from the following swap or stake.
• Do not repeat a submitted transaction simply because a balance or status has not refreshed.
• Keep order IDs private; they can reveal transfer details to someone using the tracking interface.

The implementation has automated tests and transaction-level checks. These are not an independent security audit and do not prove every asset, provider route or market condition is safe.