Privacy Policy
Last updated 10 November 2026. Plain-language summary: you can use XMRList without an account, we collect as little as we can, and we never sell data.
Who we are
XMRList is an independent directory of businesses and services that accept Monero. For anything about your data, write to [email protected] or use the contact form.
What we collect when you browse
- No account. There are no user accounts for visitors, and browsing needs no personal details.
- Server logs. Like most websites, our web server records each request (IP address, time, page and browser type). We use these logs for security and troubleshooting and delete them on a regular schedule.
- Cloudflare. The clearnet site is served through Cloudflare, which processes requests, including IP addresses, to deliver pages and block abuse.
- Analytics. The clearnet site loads Google Analytics to count visits and see which pages are used. It is not loaded on our Tor mirror. You can block it with any content blocker, or use the Tor mirror.
Cookies
- Session and security cookies (xmrlist-session, XSRF-TOKEN): needed for forms to work and to stop forged requests. They expire after about two hours.
- Preference cookies: set only if you choose a theme or a language, so the site remembers it.
- Analytics cookies: set by Google Analytics on the clearnet site, as described above.
We run no advertising cookies and no ad networks.
Tools
- The address checker, payment QR, invoice generator, converter, restore height calculator, spy node checker and donation widget run in your browser. What you type in them is not sent to us.
- The transaction checker asks our server to look up a transaction ID. A transaction key, if you enter one, is used only in your browser.
- The AML check sends the address or transaction ID you enter to our server, which queries public blockchain data. Results are kept briefly and not stored, unless you create a share link, which is kept for 30 days.
What you choose to send us
- Contact form, reports and corrections: your message, and your name and email if you give them. Used to answer you and fix listings.
- Reviews: the rating and text you submit, and a display name if you add one. Reviews are moderated and published.
- Listing submissions, claims and sponsorship orders: the business details and contact address you provide. Payments are made in cryptocurrency through a payment processor (NOWPayments); we do not receive card or bank details.
- Newsletter: your email address only. You confirm it by email first, and every issue has a one-click unsubscribe link.
Email is handled by our mail provider. Forms on the clearnet site use Cloudflare Turnstile to block bots; it is not used on the Tor mirror.
What we do not do
- We do not sell or rent personal data.
- We do not build advertising profiles.
- We do not ask for identity documents.
How long we keep things
Messages and submissions are kept while they are needed to run the directory and to keep a record of corrections. Newsletter addresses are kept until you unsubscribe. You can ask us to delete your data sooner.
Your choices
- Ask for a copy, a correction or deletion of data you sent us: [email protected].
- Unsubscribe from the newsletter with the link in any issue.
- Use the Tor mirror (address and live status) to browse without revealing your IP address and without analytics.
Businesses listed on XMRList
Listings contain public business information such as a website, what it sells and how it accepts Monero. If you run a listed business and something is wrong, tell us or claim your listing from its page.
Changes
If this policy changes, we update the date at the top of this page. See also our Terms of Use.