Post
Topic
Board Project Development
Re: Open Source Release of a Privacy Focused Cryptocurrency Exchange
by
AlisonBobert
on 07/07/2025, 13:10:20 UTC
Hello nonlogs and Vod,

What do you mean by "utilise anonymised data for troubleshooting"?   Anonymised data can be used for research, but troubleshooting requires specific information.

The data in question looks like this I redacted addresses and transaction ids:
"[<DATEANDTIME>] [ERROR] Order failed with error: insufficient funds, main.ExchangeSession{OrderID:"b0a06943af3df054", Status:"EXCHANGING", FromCurrency:(*cryptoManager.LtcHandler)(0xc0002aa000), ToCurrency:(*cryptoManager.EthHandler)(0xc000134a20), FromCurrencySign:"LTC", ToCurrencySign:"ETH", FromCurrencyID:2, ToCurrencyID:4, FeeRate:1, SendAmount:0.0013312683123676756, ReceiveAmount:0.035, ToAddress:"<REDACTED>", FromAddress:"<REDACTED>", RefundAddress:"<REDACTED>", ToTransactions:[]cryptoManager.CryptoTransaction{}, FromTransaction:cryptoManager.CryptoTransaction{Txid:"<REDACTED>", Confirmations:1, Amount:0.35, Explorers:[]*cryptoManager.CryptoTransactionExplorer{(*cryptoManager.CryptoTransactionExplorer)(0x7ff7f819b180)}}, ToConfirmations:12, FromConfirmations:1, ExchangeRate:<REDACTED>, ErrorMessage:"", ExpirationTime:<REDACTED>, CollectionTime:-1}"

As shown, when an error occurs, the system logs the relevant transaction state, including the error and technical details, without exposing personally identifiable information (such as IP addresses). This allows for effective debugging while maintaining user privacy.

So basically, the system says record xxx has malfunctioned - here are the anonymized details.   Your support rep then goes to the database to research the record, where he/she has access to all PII (including IP addresses)?  You are not anonymising data if you provide a unique record.

Unless you provide column level restrictions on your database, you cannot say the data is anonymized any more than any other system - understand?  Again, I would completely do away with that "technobabble", as without KYC anyone running this script is breaking US law.  Take resources you would spend on that, and remove all custody through smart contracts - IMO that is the winner feature!

I think storing IPs is a bad approach. Maybe if he allows users to delete these records after a trade has been completed, or deletes them periodically after a certain time has elapsed, it would be better approach.

The code does not store or collect any PII including ip addresses, which you can verify on github, the data shown in the message is the only data that is stored and it is stored strictly for troubleshooting and providing support.

I suppose the phrase "anonymised" implies that PII is stored and then removed in the logs, that isn't the case no info about the user is stored or collected as , again, you can verify in the source code itself.

As for the data itself it does expire 60 minutes after transaction is completed.

Thank you for reading,
Alison Bobert