Privacy notice

About this notice

XRPDEX is operated by Flint Luma under the LuMa Logic brand in Virginia, United States. FLINT is a public alias. LuMa Logic is not represented here as an incorporated company. Business correspondence: 150 S Sterling Blvd, Sterling, VA 20164, USA. Contact support@xrpdex.fun about account data or this notice. Replies may come from flintcryptobusiness@gmail.com.

Account information

Account sign-in is separate from connecting a trading wallet. With Google sign-in, the account service receives your Google account identifier, email address, name and profile picture under the permissions you approve. It does not request access to Gmail messages or Google Drive. With email/password sign-up, credentials go to Supabase’s authentication service. XRPDEX does not receive your Google password. You can choose a username for your XRPDEX profile.

We use the account identifier and verified email to provide sign-in, account recovery, subscription access and account settings. Saved account information includes your watchlist token identifiers, tracked public wallet addresses and tracker settings. Linking a new sign-in to an existing XRPDEX account requires confirmation while authenticated to both; accounts are not merged solely because their emails match.

Trading wallets and launch accounts

Connecting a wallet does not automatically save its recovery words, private keys or signing session to your XRPDEX account. Browser-created or imported trading wallets are used on that browser. Optional saved device copies are password-encrypted; downloaded recovery files are unencrypted and must be protected by you. Account recovery cannot recover a lost trading wallet.

Public wallet addresses, token identifiers, transactions and ledger activity may be sent to wallet providers and XRPL data providers to supply the functions you request. Transactions submitted to XRPL are public. Removing information from an XRPDEX account does not erase ledger records.

Server-run token launches are a separate workflow. Temporary launch-account keys are held in encrypted server storage so an authorized launch can resume after an interruption. Completed launches and refunds are eligible for removal of the normal server recovery key envelope after seven days; unfinished work, pending transactions/refunds or reactivated accounts can retain recovery material. Backups and public launch receipts or metadata may remain. These temporary launch keys are not traders’ personal wallet keys.

Subscriptions, email and service providers

We keep subscription identifiers, payment receipts and access records needed to manage paid access and reconcile payments. Stripe handles card entry and processing; XRPDEX does not collect full card numbers through its own forms. XRP payments and their associated ledger records are public.

Supabase provides the additional account sign-in service. Google provides Google sign-in and, through the configured business Gmail sender, verification and recovery email delivery. Sites and Cloudflare provide hosting and storage used by the platform. Wallet and XRPL market-data services receive information required for their respective functions. Their own privacy notices also govern their processing. Support messages are processed through the operator’s email services.

Browser storage and operational logs

XRPDEX uses browser storage for account sessions, wallet/device features, recent tokens, caches and settings. A shared or public device can expose information left in its browser profile. Account sign-out and wallet disconnection are separate controls. The site and its providers may keep operational and security logs containing items such as request time, IP address, browser information, account or public wallet identifiers and error information. Do not put wallet recovery material into support messages.

Retention and choices

Account settings and billing/access records are retained to operate and support the account. Request access, correction, account unlinking or deletion through support@xrpdex.fun. We may require proof that you control the account before acting. Requests can involve service providers and backups; public blockchain records cannot be deleted by XRPDEX. This notice does not promise immediate removal from every backup or an automatic fixed retention period for all records.

You can edit watchlists and tracked wallets, use the account sign-out control, and separately disconnect trading-wallet sessions. You can manage Google permissions in your Google Account. Removing Google permission does not itself cancel a paid subscription. Use the subscription controls or contact support to request subscription assistance.

Security and changes

We use measures including authenticated access, restricted server credentials, encrypted temporary launch-key storage and optional encrypted device-wallet copies. These measures cannot guarantee that all compromise or service interruption is prevented. We will update this notice as the platform and its data uses change.