Privacy

What Lopency holds about you, why it holds it, and who else can see it. Short, because there is not much of it.

Last updated 15 August 2026.

01The short version

We hold what the exchange needs to work and to stay honest: how to sign you in, which profiles you have proven are yours, what you ordered and did, and what you paid.

There is no analytics, no advertising and no third-party tracking on this site. One cookie, and it only keeps you signed in. We do not sell anything about you, because there is nobody we would sell it to.

02What we hold, and why

Your username, email and a hash of your passwordTo make an account exist and let you back into it. The password itself is never stored, only an argon2 hash of it.

The profiles you connect, and the one-time codeTo prove the profile is yours before you can order work on that platform, and to check afterwards that work landed.

Your orders, the work you complete, and your points ledgerThis is the service. Every point in and out is recorded with a reason so a balance can always be explained.

The address and browser you signed up fromOnly to notice when twenty accounts arrive from one place, which is what farming looks like from the inside. It lowers a trust score and is never used to grant anything.

How long a page was open and visible while you workedTo pay for attention rather than for a tab left in the background. Recorded as seconds against that task, nothing more.

Your top-up reference and the amount that arrivedTo match money you sent to your balance. We never see or hold your card, bank login or wallet keys.

03The browser helper

The helper is optional on a computer and everything works without it. If you install it, this is the whole of what it does.

It runs only on lopency.com and on the nine platforms the service supports. It is not loaded on any other site. On a task page it watches the platform’s own like or follow control, counts how long the page is actually visible, and sends back three things: that the control was activated, how many seconds were visible, and which task it was.

It does not read page content, does not collect your browsing history, and never sees your password on any platform, because it never asks for one. It signs in with a token you generate and can revoke from your settings, not with your session cookie.

It cannot perform an action for you. It watches you do it, which is the entire point of it.

04Who else can see it

VercelHosts the site and runs the code. Sees requests as any host does.

NeonRuns the database the above is stored in.

ResendSends the one email this site sends: the link that lets you set a new password. It handles your address and that message, and nothing else, because nothing else is ever mailed to you. Their sending runs on Amazon's servers in Tokyo, so that message passes through Japan on its way to you.

Cloudflare TurnstileOnly on the sign-up form and on a sign-in that already looks like guessing. It checks you are a person; it is not analytics and does not follow you around.

The platform you linkedWhen we check your verification code we fetch your public profile page, exactly as any visitor would. Nothing about you is sent to them.

Transfers are made directly by you through Wise or an exchange. Those services have their own terms and see whatever you tell them; we only ever see the reference you paste back to us.

05Cookies

One. It holds your session so you stay signed in, is marked httpOnly so page scripts cannot read it, and is sent only to this site. Signing out deletes it.

There are no advertising, analytics or preference cookies, which is why this site has no cookie banner to dismiss.

06How long we keep it

Your account data stays while the account exists. The points ledger is append-only and is kept for as long as the account does, because a balance that cannot be explained is not a balance.

Rate-limit counters are deleted automatically once their window has passed. Sessions expire after thirty days unused and ninety days absolutely. A password reset link stops working after an hour or the moment it is used, whichever comes first, and the record that it existed is deleted a week later.

07What you can ask for

Ask us and we will tell you what we hold about you, correct it if it is wrong, or close your account and delete your personal details.

Two honest limits. Records of completed exchanges may be kept in a form that no longer identifies you, because other members’ balances depend on them. And where an account was suspended for abuse, we keep enough to stop the same person signing up again the next day.

Email hello@lopency.com and a person will answer.

08Children

The service is not offered to anyone under 16. If you believe a child has an account here, tell us and we will remove it.

09Changes

If what we collect changes, this page changes with it and the date at the top moves. Material changes are notified in the product before they take effect.