Thorchain
grade B
Decentralized and censorship-resistant infrastructure for trading Bitcoin, Ethereum, Tether (USDT), USDC, and other native assets.
grade B
What the documents mean for you
THORChain's interface can cut off your access at any time, without notice and for any reason, and bars VPNs and restricted jurisdictions. It logs IP addresses and analytics and hands data to authorities on request. No KYC is asked, and it never holds your funds.
The Terms of Use state outright that no account, sign-up or KYC is needed for the interface, and that the operators will never ask for a picture ID, phone number or home address. No clause anywhere lets them demand identity documents or hold funds until you identify yourself, and the interface is non-custodial so it never holds your money.
Nothing triggers an identity check: the Terms say there is no KYC to use the interface and no account is required. The documents state they will never ask for a picture ID, phone number, home address, private keys or seed phrases. They can still cut off your access to the website and interface at their discretion, but they never hold your funds, so there is no balance for them to withhold.
Warnings
They can restrict, suspend or terminate your access to the site and swap interface at any time, without notice, including for suspected illegal or fraudulent activity or "any other reason in our sole discretion". Because the interface is non-custodial, no funds of yours are held when this happens.
Analytics and infrastructure providers such as Google Analytics, Mixpanel, Hotjar, Fathom and Cloudflare collect data about your visit, including your IP address. Your data may be processed in other countries under different data protection laws.
Your wallet address, amounts and timestamps are broadcast to public blockchains and stay there permanently. Your right to request deletion does not reach this data.
The Terms and Privacy Policy apply to thorchain.org and swap.thorchain.org, not to the protocol itself, wallets, nodes or other front ends, which set their own rules. Anyone who forks the interface must publish their own terms and privacy policy.
How the score was reached
Privacy77/100
Trust65/100
Overall = (privacy × 0.6 + trust × 0.4) / 10, rounded = 7/10, grade B. Each attribute above rests on a clause quoted below or was assigned by a moderator; the rest is what the listing knows.
Attributes8 moved the score
Service termination policytrust -4
The provider can terminate access at any time, without notice, at its discretion.
The Terms let them restrict, suspend or end your access at any time, without notice, for any reason they choose.
“We reserve the right to: * Restrict, suspend, or terminate your access to the Services at any time * Refuse to provide the Services to any person or entity * Take any of the above actions without prior notice or liability”
Terms, thorchain.org
Data sharingprivacy -3
Personal data may be shared with authorities or third-party providers for compliance.
The privacy policy allows sharing collected data with outside vendors and disclosing it to authorities.
“We share information with third-party vendors and service providers who perform services on our behalf”
Privacy policy, www.thorchain.org
Frontend policies varytrust -1
A decentralised protocol whose access, privacy and legal terms vary by the third-party frontend used.
The Terms and Privacy Policy cover only this website and interface; the protocol, wallets and other front ends have their own separate terms, and anyone forking the interface must publish their own.
“The Terms do not apply to the THORChain protocol itself, public blockchain networks, wallets, nodes, or other third-party services that you may use in connection with the THORChain protocol. Those services are operated independently and may have separate terms of use.”
Terms, thorchain.org
Open source codetrust +7
The source code of the service is publicly available and licensed as open source.
The interface source code is published under the MIT licence and the protocol is described as open source.
“The source code for the Interface is released under the MIT License. You are free to fork, modify, and deploy your own version of the Interface.”
Terms, thorchain.org
Decentralized networktrust +5
Data, control and decision-making are distributed across independent nodes rather than one operator.
Both documents describe THORChain as a decentralized protocol run by independent node operators rather than one company.
“THORChain is a decentralized protocol. No single company or legal entity owns or operates the THORChain protocol.”
Terms, thorchain.org
No registration neededprivacy +5
Users can access and use the service without creating an account.
The Terms state that using the interface requires no account or sign-up.
“No Account or Sign Up Required There is no KYC needed to use the Services.”
Terms, thorchain.org
Approvedtrust +5
Passed limited recent checks and met approval threshold.
Non-custodial protocoltrust +3
The protocol never takes custody of the user's funds during an exchange.
The Terms state the interface never holds or controls user funds; swaps run through the user's own wallet.
“We do not hold, control, or have access to your funds at any time”
Terms, thorchain.org
What costs you most first. Tap one to read the clause it rests on, or what the listing knows, priced as kycnot.me prices it.
What the documents say
They can hand your information to governments, courts and police, both when the law requires it and when they believe in good faith it is needed to investigate possible violations.
“We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to: * Comply with legal obligations, court orders, or government requests * Respond to subpoenas, search warrants, or other legal processes”
Privacy policy, www.thorchain.org
They record your IP address, browser, device identifiers and clicks, and use outside trackers such as Google Analytics, Mixpanel, Hotjar, Fathom and Cloudflare, which see your IP too.
“Analytics Services - Such as Google Analytics, Mixpanel, Hotjar, or Fathom Analytics to understand user behavior and improve the Services * Infrastructure Providers - Such as Cloudflare, which may collect IP addresses for security and performance purposes”
Privacy policy, www.thorchain.org
Analytics data is kept for 2 to 24 months in aggregated or pseudonymised form. Transaction and compliance data is kept as long as they say legal obligations require.
“Transactional Data - Retained as necessary to provide Services and comply with legal obligations Analytics Data - Typically retained for 2-24 months in aggregated or pseudonymized form”
Privacy policy, www.thorchain.org
Anything you type into the AI chatbot is collected, along with timestamps and device data, and shared with AI vendors for hosting, monitoring and content moderation. They say they do not train models on it.
“AI service providers and related vendors that help us operate the AI chatbot (for example, model hosting, monitoring, and content moderation)”
Privacy policy, www.thorchain.org
You agree not to use a VPN, proxy or any other tool to get around their geographic or eligibility restrictions.
“You agree not to use any technology, including but not limited to Virtual Private Networks (VPNs), proxies, or other means, to circumvent any geographic, technical, or eligibility restrictions in these Terms.”
Terms, thorchain.org
Once a transaction is submitted they cannot cancel, reverse or change it, and support cannot recover funds you lose, including funds sent to a wrong address.
“Please note: Support is provided on a best-effort basis for technical assistance only. We cannot reverse transactions, recover lost funds, or provide legal, financial, or investment advice.”
Terms, thorchain.org
Community
Write a reviewCancel
No reviews yet. If you have used it, say what actually happened.
The average is weighted by each reviewer's standing: verified reviews and accounts with karma count more, new or untrusted accounts less. How karma works.