A venue that asks for no identity should be able to say precisely what it does hold. This is the complete list, and it is checkable against the source.
Recorded when you sign in: it is your account. It is already public on chain.
Kept as the venue's ledger and its hash-chained journal. An exchange that could forget them could not prove what it owes you.
Recorded in our web servers' access logs and kept for 14 days, for security and abuse prevention and to apply jurisdiction rules where they exist. Never sold or shared.
Stores which of six languages you chose. Nothing else is in it.
Your theme, price alerts and your venue session key are kept in your own browser storage. They are never sent to us, and clearing site data removes them permanently. Signing out deletes the session key.
Holding no identity means we cannot restore access to a lost wallet, and cannot help if you send funds to the wrong address. Those are the costs of the design, and they are real.
Not yet in force. The mechanism is built and inert: no restricted-jurisdiction list has been reviewed or adopted, so nobody is currently refused. Using OpeniBank from a place where it is not permitted remains your responsibility until this says otherwise.
See also the custody model and terms.