Sushi — Privacy

1. Information We Collect on Sushi

When you interact with Sushi at sushi.com, certain categories of information may be collected depending on how you engage with the platform. Because this is a non-custodial decentralized exchange, the service does not require you to create an account or submit personally identifiable information such as your name, email address, or government-issued identification. However, technical data is collected automatically when you visit the site, including your IP address, browser type, operating system, referring URLs, and pages viewed. Wallet addresses that interact with the protocol's smart contracts are recorded on public blockchains by their nature and are not considered private information within the context of this policy. Any information you voluntarily provide through community forums, support channels, or governance participation may also be retained as described in subsequent sections.

2. How We Use Your Information

Information gathered through the Sushi interface is used exclusively to operate, improve, and secure the service. Technical data such as browser and device information helps the development team identify compatibility issues and optimize the user interface for different environments. Aggregated, anonymized analytics data is used to understand user behavior patterns and prioritize feature development that benefits the broader community. The platform does not sell personally identifiable information to third parties, nor does it use your data to serve targeted advertising. In cases where legal obligations require disclosure — such as a valid court order or regulatory demand — the minimum necessary information will be shared in compliance with applicable law. All other uses of collected data are limited to maintaining the integrity and performance of the exchange.

3. Cookies and Tracking Technologies

The Sushi web interface uses cookies and similar tracking technologies to enhance the functionality and performance of the site. Essential cookies are strictly necessary for core features such as remembering your preferred network, wallet connection state, and UI settings between sessions. Analytical cookies, which may be set by trusted third-party analytics providers, collect anonymized data about how visitors navigate the site to help the team identify areas for improvement. You have the right to control cookie preferences through your browser settings, and most modern browsers allow you to block or delete cookies at any time. Please note that disabling certain essential cookies may limit the functionality of the interface. The exchange does not use tracking technologies for behavioral advertising purposes, and no cross-site tracking profiles are built from your visit data.

4. Third-Party Sharing and Sushi Integrations

Sushi integrates with a range of third-party services to deliver its full feature set, and these integrations involve limited, necessary data sharing. Blockchain RPC providers receive your wallet's query requests to fetch on-chain data such as token balances and transaction history. Analytics providers may receive anonymized usage data to help the team understand aggregate user behavior. Security and fraud prevention tools may process technical signals such as IP addresses to detect and block malicious activity. Liquidity aggregation partners receive swap request parameters — including token pairs and amounts — to compute optimal routing paths. None of these third parties are authorized to use your information for their own marketing or commercial purposes beyond the specific service they provide to the protocol. This exchange does not share data with data brokers or advertising networks.

5. Data Security Measures

Protecting the information associated with your use of the platform is a top operational priority. The web interface is served over HTTPS with strict transport security headers enforced to prevent interception of data in transit. Access to backend systems and analytics dashboards is restricted to authorized personnel and protected by multi-factor authentication. The service undergoes periodic security assessments conducted by independent firms to identify and remediate vulnerabilities in both the application layer and the supporting infrastructure. Because the core protocol operates through audited smart contracts on public blockchains, the security of your funds is guaranteed by cryptographic proofs rather than institutional trust. You are encouraged to independently verify the contract addresses listed on the official site and to exercise caution when interacting with any interface claiming to represent this exchange.

6. Your Rights as a Sushi User

Depending on your jurisdiction, you may hold specific legal rights regarding the personal information the platform processes. Users in the European Economic Area are entitled to rights under the General Data Protection Regulation, including the right to access, correct, delete, restrict processing of, or receive a portable copy of their data. California residents may exercise rights under the California Consumer Privacy Act, including the right to know what data is collected and to opt out of any applicable sale of personal information. To exercise these rights, users should submit a request through the official support channels identified in the Contact Information section of this policy. The team will respond to verified requests within the timeframe required by applicable law. Please note that information recorded on public blockchains — such as transaction history linked to a wallet address — cannot be deleted or altered, as this is an immutable characteristic of blockchain technology.

7. Data Retention

The service retains collected data only for as long as necessary to fulfill the purposes described in this privacy policy or to comply with applicable legal obligations. Server logs containing IP addresses and technical identifiers are typically purged on a rolling basis within ninety days of collection. Anonymized and aggregated analytics data, which cannot be used to identify any individual, may be retained indefinitely to support long-term product development and research. Communications submitted through support channels are retained for a period sufficient to resolve the inquiry and maintain a reasonable service record, after which they are deleted. Data shared with third-party service providers is governed by their respective retention policies, though contractual obligations require such partners to retain data no longer than necessary for the agreed service. Upon request, the team will provide clarification on retention periods applicable to specific categories of data.

8. International Data Transfers

As a globally accessible decentralized exchange, the Sushi platform may involve the transfer of certain technical data across international borders. Infrastructure providers, analytics services, and security partners may operate servers located in jurisdictions outside your country of residence. When transferring data from the European Economic Area to countries that do not provide an equivalent level of data protection, the service relies on lawful transfer mechanisms such as Standard Contractual Clauses approved by the European Commission. For transfers from other jurisdictions, appropriate safeguards consistent with local law are applied. By accessing the service from any location, you acknowledge that your technical data may be processed in countries with data protection standards that differ from those in your home jurisdiction. The team is committed to ensuring that all international transfers are conducted with appropriate legal and contractual protections in place.

9. Children's Privacy

The Sushi platform is not designed for, directed at, or intended to be used by individuals under the age of eighteen. The service does not knowingly collect personal information from minors, and access to decentralized finance tools carries inherent financial risks that make them inappropriate for underage users. If a parent or guardian believes that a child under eighteen has provided personal information through the interface or support channels, they should contact the team immediately using the details provided in the Contact Information section. Upon verification, any such information will be deleted promptly from accessible systems. Users are responsible for ensuring that minors in their household do not access this exchange without appropriate supervision, and parents are encouraged to use parental control software to restrict access to financial platforms.

10. Privacy Policy Updates

This privacy policy may be updated periodically to reflect changes in the platform's data practices, applicable law, or the addition of new features and integrations. When material changes are made, notice will be provided through a prominent announcement on the official site and, where feasible, through community governance channels. The date of the most recent revision will always be displayed at the top of the policy document. Continued use of the Sushi interface after the effective date of a revised policy constitutes your acceptance of the updated terms. Users who disagree with any material changes are encouraged to cease using the service and to disconnect their wallets from the interface. The team recommends reviewing this policy periodically to stay informed about how your data is handled.

11. Contact Information

If you have questions, concerns, or requests related to this privacy policy or the data practices of the platform, you may reach the team through the official support portal at sushi.com. Community members may also raise privacy-related questions in the official Discord server or through the governance forum, where the team actively monitors and responds to user inquiries. For formal data subject requests — such as access, deletion, or portability requests — please use the dedicated privacy request form available through the support portal to ensure your request is routed to the appropriate team member. The team is committed to responding to all legitimate inquiries within the timeframe required by applicable law. Please include sufficient detail in your request to allow the team to verify your identity and process your inquiry efficiently.

12. Consent and Your Agreement

By accessing and using the Sushi web interface, you consent to the data practices described in this privacy policy to the extent permitted by applicable law. Where consent is required as a specific legal basis for processing — such as for non-essential cookies under certain regulatory frameworks — the platform will present a clear consent mechanism before such processing begins. You may withdraw consent at any time by adjusting your cookie preferences through the site's consent management tool or by ceasing to use the service entirely. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal. The platform relies on additional legal bases beyond consent for certain processing activities, including legitimate interests and legal obligation, and these are detailed in the relevant sections above. Users who do not agree with this policy should refrain from using the interface.