Privacy Policy
TronTransfer (“we”) runs trontransfer.com, app.trontransfer.com and the TronTransfer API. We built it to collect as little as possible: no accounts, no cookies, no private keys, no seed phrases, no names or emails (unless you email us).
What we never receive
- Your private key or seed phrase. You sign transactions in your own wallet; we only receive the signed transactions.
- Payment card or bank details. Fees are paid on-chain, in TRX or USDT.
What we collect, and why
- Transfer records. When you send USDT through us we store your sending wallet address, the recipient address, the USDT amount, the fee, the transaction IDs, the pricing tier and the time. We also store how the request reached us: whether it came from our web app or our API, the website or app it was sent from (the Origin header), the browser or app identifier (User-Agent), and, from the web app, how you first found us (a tagged link or the referring website’s domain, or “direct”). This is needed to broadcast and track your transfer, account for fees and handle support questions. The same data is public on the TRON blockchain.
- Address checks. When you check a recipient (free) or buy an AML report (paid), we store the address checked, the result and the time, so repeat checks of the same address can reuse the result.
- Explorer lookups. When you look up an address, transaction or block on explorer.trontransfer.com, our server fetches the public data from a TRON network provider (TronGrid) and keeps the result in memory for a few minutes; we don't store or log what you searched, and our page statistics record only the type of page (for example “address”), not the address or transaction.
- Page statistics, without cookies. For each page view we store the page, the referring website's domain, the country (from our hosting provider), the device type and whether it looked like a bot. To count unique visitors we store a one-way hash of your IP address and browser that changes every day; we do not store your IP address itself.
- Server and security logs. Our servers and hosting provider keep short-term technical logs (which can include IP addresses) to keep the service running and to block abuse.
- Emails you send us. If you email [email protected], we keep that conversation to answer you.
Stored only in your browser
The app saves a few things in your browser’s local storage so you don’t have to retype them: your own wallet address (if you enter it), your last few recipients, whether you disconnected your wallet, and how you first found us (a tagged link or the referring website’s domain, and the date), which is sent with your transfers. This stays on your device; clear your browser data to remove it.
Who else processes data
- Cloudflare hosts and protects our websites, and sees standard connection data such as IP addresses.
- TRON network providers (for example TronGrid) are used by our servers and by the app in your browser to read balances and broadcast transactions.
- Our energy provider receives your sending wallet address to delegate the energy for your transfer.
- AML / risk-screening providers receive the address being checked when you buy an AML report.
- CoinGecko supplies the TRX price. No personal data is sent.
Some guide pages show our own YouTube videos. Until you press play, nothing loads from YouTube (the preview image comes from our own server). When you press play, the video loads from YouTube’s privacy-enhanced domain (youtube-nocookie.com) and YouTube’s privacy policy applies to that video.
We don’t sell personal data and we don’t use advertising trackers.
TronTransfer Wallet (browser extension)
The TronTransfer Wallet extension for Chrome (currently in beta) is non-custodial and has no accounts.
- On your device only. Your recovery phrase and private keys are encrypted with your password (scrypt + AES-256-GCM) and stored in the extension’s local storage. So are your account names and addresses, contacts, settings, the sites you connected and the addresses you’ve sent to (used for the new-address and look-alike checks). We never receive your recovery phrase, private keys or password, and we can’t recover them for you. Removing the extension deletes this data from your browser.
- Sent to TRON network providers (TronGrid). Your wallet addresses, to read balances, history and resources, and the transactions you sign, to broadcast them. Requests use an API key belonging to TronTransfer (or your own, if you set one).
- Sent to TronTransfer. When you prepare a USDT send, the recipient and sending addresses, to quote the exact sponsored fee and run the free recipient checks. When you choose a sponsored send, the two signed transactions; these are handled exactly like transfers made in our web app (see “What we collect” above). If you buy an AML check, the address being checked.
- Websites you connect to see only your public address, and only after you approve the connection. They never get your keys, and every signature needs your approval in the wallet window.
- The extension contains no analytics, tracking or advertising code and loads no code from the internet.
Blockchain data is public and permanent
Anything you do on the TRON blockchain — addresses, amounts, transaction IDs — is public and can’t be changed or deleted by anyone, including us.
How long we keep data
We keep transfer and check records for as long as we need them to run the service, keep accurate accounts, prevent abuse and meet legal obligations. Page statistics are aggregate and can’t identify you.
Your choices
You can ask us what records we hold for a wallet address, or ask us to delete records we’re not required to keep, by emailing [email protected] (we may ask you to prove you control the wallet, for example by sending a small transaction or signing a message). We can’t change anything that’s on the blockchain.
Children
TronTransfer is not intended for anyone under 18.
Changes
If we change this policy we’ll update the date at the top of this page.