PrivataSwap

Non-custodial swap meta-aggregator that fans out to 41 underlying engines (Exolix, FixedFloat, SideShift, Trocador, ChangeNOW, SimpleSwap, StealthEx, ChangeHero, Godex, MajesticBank, and ~30 others per their public `/api/v1/providers`). Operator-published positioning: "Private swaps across 50+ providers, 10,000+ assets. Exclusive XMR Privacy-Hop and DeFi mode for the most private routes. Tor-friendly." Same product shape as OrangeFren, CypherGoat, or kyc.rip — pick-the-best-rate aggregator with a privacy-routing layer on top. Listed at Grade B on first submission (per playbook: new aggregator, no curator test trade on file yet, sparse operator-published auxiliary documentation). Upgrade to A is possible after we run end-to-end signup-deposit-settlement testing + a few real swaps land cleanly.

What it is. Vite/React SPA at `privataswap.com`. The home page is a swap form (from-coin / amount / to-coin → quote across engines → pick + execute). The wallet that holds funds is yours; PrivataSwap routes the order to the chosen engine but never custodies the swap leg itself. Engine list is public at their `/api/v1/providers` JSON endpoint and includes coverage tags per engine: `kycLevel` (`none` / `minimal` / `soft_triggered`), `logPolicy`, `refundPolicy`, `jurisdiction`. Operator-supplied features: XMR Privacy-Hop (an XMR-routed detour for non-XMR pairs) and a DeFi mode for on-chain DEX routes. Tor-friendly per operator claim; no operator-side `onion` mirror was discoverable at submission time.

What you trust.

• Non-custodial swap aggregator. Funds flow user → chosen-engine → user. PrivataSwap doesn't hold balances between legs.
• 41 underlying engines, transparently enumerated. The public `/api/v1/providers` JSON makes it straightforward to verify which engines they route to — useful sanity check before trusting an unfamiliar aggregator.
• No account required. Submit the swap form, get the deposit address, send. No signup / email / KYC at the aggregator layer (engines vary — see kyc.rip's per-engine grade for the underlying providers).
• Tor-friendly clearnet site. No operator-published `.onion` mirror at submission time. Site loads behind Tor; absence of a dedicated onion is a transparency caveat, not a blocker.
• Operator contact: `support@privataswap.com` (submission contact). No publicly-disclosed team, jurisdiction, or legal entity.

Operational specs.

• Site. Vite SPA — every route serves the same 1.5KB shell; content rendered client-side. No-JS rendering not supported in the current build.
• Engine breadth. 41 engines listed in `/api/v1/providers` (similar to kyc.rip's ~17 + OrangeFren's comparable count). Coverage skews heavily to instant-swap fixed-rate providers; one or two DEX/DeFi routes per operator claim.
• Privacy-hop mode. XMR-routed detour for arbitrary input/output pairs. Mirrors kyc.rip's "ghost" mode in concept; we have not yet run a test swap to compare execution / spread.
• No published Tor onion. Curator caveat — see /guides/verify-onion-mirror.
• No published privacy / terms / AML page at submission time (every legal slug returns the SPA shell, no operator-written content).
• API. `/api/v1/providers` is open, well-shaped, and probably aggregator-friendly for downstream integrators. Worth probing for a `/quote` and `/order` shape too — submission body doesn't disclose pricing logic.

Operator philosophy. Per submission: privacy-first multi-provider aggregation with XMR as the canonical privacy detour. Differentiator vs CypherGoat / OrangeFren is the explicit "Privacy-Hop" + DeFi-mode framing. We will check against the operator's own published documentation once it exists; for now the operator-supplied tagline is the canonical source.

Grade rationale. Grade B because: (1) operator surface is sparse — no published /privacy, /terms, /aml, /about page; (2) no curator test trade on file yet; (3) no published Tor onion; (4) no public team / jurisdiction / legal entity disclosure. The aggregator design itself is sound, the engine list is publicly verifiable, and the non-custodial routing is the right shape. Re-grading to A is conditional on (a) successful end-to-end test trade, (b) published privacy policy and contact, (c) operator-published Tor onion mirror.

Useful when:

• You want to compare quotes across 40+ swap engines without trusting a single aggregator's pick.
• You prefer XMR-as-detour routing for swaps between non-XMR pairs.
• You're already comfortable with the underlying engines (most are graded individually on kyc.rip and xmr.club) and just want a quote-comparison surface.
• You're researching the swap-aggregator ecosystem and want a current snapshot of who's routing where.

Caveats:

• No operator-published legal pages. /privacy, /terms, /aml all return the SPA shell. Don't assume any AML / refund posture beyond what each underlying engine specifies in `/api/v1/providers`.
• Operator-published Tor onion at `http://privatakikifswd33w5qe4olxabx2kqznei46oqm2w2rmwjtt2mwfqad.onion/` (added 2026-05-27 after operator confirmation). Satisfies the onion-disclosure standard from /guides/verify-onion-mirror.
• No published team / jurisdiction / commercial entity. Trust the aggregator implicitly only after you've verified a few test orders flow as quoted.
• No JS = no usage. Vite SPA with no SSR fallback.
• Pricing / spread / commission undisclosed. Per-engine pricing comes from the underlying provider; PrivataSwap's own markup on top is not disclosed in operator material we could fetch. Cross-check the engine's direct quote vs PrivataSwap's quote to see the spread the aggregator is adding.
• Curator review pending end-to-end test. Listing is first-pass admin-promote; full enrichment + i18n will follow in the Phase 2 enrichment campaign.