Privacy & Terms

Privacy

Vigilante Trading runs in your browser. Your keys are generated on your device and never leave it. Vigilante Trading does not collect anything about you. Pick a memorable username, that's it.

Every offer you post — along with the feedback and reviews you leave and receive — is public on the blockchain, for reputation-building, posterity, and your own research on other traders.

By contrast, your chat conversations stay 100% private. Direct messages between traders are end-to-end encrypted — they live on the blockchain only as ciphertext that you and your trade partner can read, never the operator, the indexers, or anyone else watching the chain. Vigilante Trading also collects no name, email, phone, or ID, and the payment details you exchange (such as a receiving address) move through that encrypted channel instead of the public orderbook.

We encourage you to use a VPN, Tor, I2P, ENS or Lokinet when accessing Vigilante Trading — anything that hides your IP from the server you're talking to is a good idea. We don't fingerprint your browser, we don't profile you, and we explicitly design our defenses against abuse so they don't punish privacy-conscious users. Our rate limits are crude (a handful of signups per user per day) and easily defeated by VPN rotation — that's a conscious tradeoff. We'd rather accept more abuse than make privacy-respecting users feel unwelcome. If a defense would require tracking you to work, we don't ship it.

We go further than encouraging privacy. A Morphit node can run with zero use of the clearnet internet: chain reads and software updates travel over Tor and I2P, BTC/XMR fee checks and prices over Tor, and on such a node a firewall lets only Tor and I2P reach the internet. The node claims this only when its own checks pass, and other nodes show it as that instance's own statement, which they cannot verify. It is per-node — a clearnet instance still uses clearnet by design. For someone in a censored region, that is a marketplace node with no clearnet address to block, which visitors reach over Tor or I2P.