Privacy Policy

Privacy is not a feature.
It's the architecture.

XMR Predictions was built from the ground up to know as little about you as possible. Not your real identity. Not your browser. Not your IP. Positions are stored under pseudonymous handles only — no personal information required.

What We Collect

Only pseudonymous handles and position data.

We store only pseudonymous handles and position data. No email, no government ID, no IP logs, no tracking. No behavioral data. No metadata. No telemetry. No analytics. The only personal information that exists is the pseudonymous handle you choose and the positions you take.

What We Don't Do

Every badge below is a technical fact, not a marketing claim. You can verify each by inspecting the network tab in your browser's developer tools.

No Cookies

No third-party cookies. No tracking cookies. No persistent cookies. Authentication uses a secure httpOnly session cookie containing only a session token — no personal data, no tracking identifiers.

No Analytics

No Google Analytics. No Mixpanel. No Plausible. No Fathom. No custom tracking. No pixel. No beacon. No event stream. We do not measure page views, clicks, scroll depth, session duration, or any user behavior whatsoever.

No IP Logging

Web server access logs are disabled. Your IP address is not recorded, stored, or processed. If you access through Tor or a VPN, we wouldn't know even if logs existed — but we ensure they don't.

No Fingerprinting

No canvas fingerprinting, WebGL fingerprinting, audio fingerprinting, font enumeration, or any technique that creates a unique identifier from your browser's characteristics. Your browser is not profiled.

No Identity Collection

Accounts use a pseudonymous handle you choose — no email, no government ID, no OAuth, no wallet connect. Your real identity does not exist in our system. Passwords are bcrypt-hashed and never stored in plaintext. Account deletion on request removes all associated data.

No Third-Party Scripts

The only external resources loaded are Google Fonts (Geist) and the CoinGecko price API. No ad networks, social widgets, CDN tracking, chat widgets, or any script that reports to a third party about your behavior.

Where Your Data Lives

Your data is stored server-side under your pseudonymous handle. Here's the complete inventory of what we store.

Pseudonymous handle

A self-chosen pseudonym you use as your identity on the platform. No email address. No government ID. No real name.

Positions

Your prediction market positions — side, amount, market ID, timestamp. Stored in our database under your pseudonymous handle only.

XMR payout address

A Monero subaddress you provide for receiving payouts. Set by you after login. Used only for settlement.

Password hash

Your password is bcrypt-hashed before storage. The plaintext password is never stored and cannot be recovered by anyone, including us.

What We Don't Store

No email addresses. No real names. No government IDs. No IP addresses. No browser fingerprints. No tracking identifiers. No analytics data. The only data we hold is your pseudonymous handle, hashed password, positions, and payout address. Account deletion on request removes all associated data — contact contact@xmrpredictions.org.

Why Monero Is the Only Currency for Private Prediction Markets

A prediction market denominated in a transparent cryptocurrency is a surveillance tool. Your positions reveal your beliefs, your information advantages, and your financial capacity. Monero ensures that even if you win big, nobody can trace it back to you.

Ring Signatures

Sender Privacy

Every Monero transaction includes a ring of decoy signers — currently a minimum of 16. An observer cannot determine which member of the ring is the actual sender. This is mandatory and protocol-enforced. There is no "transparent mode." Every transaction is private by default, which means your prediction market winnings are indistinguishable from any other XMR transfer.

Ring size 16 (mandatory minimum)

Stealth Addresses

Receiver Privacy

Every transaction generates a one-time stealth address for the recipient. Even if you publish your Monero address publicly, nobody can scan the blockchain to determine which transactions were sent to you. Each payment creates a unique, unlinkable destination. This means if you withdraw prediction market winnings to your wallet, the payment is invisible to anyone monitoring your public address.

Address type One-time, per-transaction, unlinkable

RingCT (Confidential Transactions)

Amount Privacy

Ring Confidential Transactions hide the amount transferred in every transaction. Observers can verify that inputs equal outputs (no XMR created from nothing) through Pedersen commitments and range proofs, but the actual amounts remain encrypted. For prediction markets, this means nobody can see how much you wagered or how much you won — the amounts are cryptographically hidden.

Mechanism Pedersen commitments + Bulletproofs+

Dandelion++

Network Privacy

Transaction propagation across the Monero network uses Dandelion++, which prevents observers from correlating a transaction with the IP address that broadcast it. Transactions are first sent through a random "stem" path before being "fluffed" to the wider network, making IP-based traffic analysis ineffective. Even sophisticated network-level adversaries cannot link your transactions to your physical location.

Protection IP-transaction unlinkability

FCMP++ (Full-Chain Membership Proofs)

Next Generation

The upcoming FCMP++ upgrade represents a paradigm shift in transaction privacy. Instead of selecting a ring of 16 decoys, FCMP++ proves that the real input exists somewhere in the entire blockchain without revealing which one it is. The anonymity set goes from 16 to the entire UTXO set — millions of outputs. This makes statistical analysis of ring membership patterns fundamentally impossible, providing the strongest sender privacy guarantee of any cryptocurrency protocol.

Anonymity set Entire blockchain (millions of outputs)

How We Compare

A side-by-side comparison of XMR Predictions against typical prediction market platforms.

XMR Predictions Typical Platform
User accounts Pseudonymous only Email + KYC required
Position storage Pseudonymous server-side Linked to real identity
Analytics Zero Full behavioral tracking
IP logging Disabled Logged and stored
Settlement currency XMR (private) USD / ETH (traceable)
Transaction privacy Ring sigs + stealth + RingCT Public blockchain or bank records
Cookies Session auth only Session + tracking cookies
Data subpoena risk Pseudonyms only — no real identities Full user history available

Built by a Privacy-First Team

XMR Predictions is built by the XMRHub team — the same team behind XMRHub and XMRMap, two established Monero ecosystem tools with a proven commitment to user privacy.

The central resource hub for the Monero ecosystem. XMRHub aggregates news, tools, educational content, and community resources for Monero users. Built with the same privacy-first principles: no tracking, no analytics, no identity collection. XMRHub demonstrates that you can build useful, information-rich web applications without surveillance infrastructure.

Tracking scripts 0
User data collected None
Cookies set 0

A real-time visualization of the Monero network's global node distribution. XMRMap renders network topology data without collecting any information about who views it. The tool processes node data server-side and presents it client-side with zero user identification. A demonstration that even data-intensive applications can be built without compromising the viewer's privacy.

Tracking scripts 0
User data collected None
Cookies set 0

Our Guarantees

I

We will never introduce analytics.

Not "privacy-respecting" analytics. Not "self-hosted" analytics. Not "aggregate-only" analytics. No analytics. The moment you measure user behavior, you've created a dataset that can be subpoenaed, breached, or misused. We don't create that dataset.

II

We will never require real identity.

Accounts are pseudonymous — a handle you choose, nothing more. We will never require email addresses, government ID, KYC verification, or any form of real identity. You can participate using only a pseudonym and a Monero address.

III

We will never collect more data than necessary.

We store only what is needed to operate: pseudonymous handles, hashed passwords, positions, and payout addresses. No email. No IP logs. No browsing history. No behavioral data. Account deletion on request removes all associated data.

IV

We will never support a non-private settlement currency.

If settlement moves from simulated to real, it will be in Monero. Not Bitcoin (transparent). Not Ethereum (transparent). Not a stablecoin (custodial and transparent). The denomination is the privacy model. XMR or nothing.

V

We will never sell, share, or monetize user data.

The only data we store is pseudonymous handles and positions — no real identities, no behavioral data, no metadata to monetize. We will never sell, share, or provide this data to third parties. A breach would reveal only pseudonyms and positions, not real-world identities.

Privacy Questions

If you have questions about our privacy practices, want to verify a specific claim made on this page, or have identified a privacy concern, contact us through the channels listed on the Contact page. We take privacy inquiries seriously and respond to all good-faith questions.

This policy was last updated March 2026. We will update this page if our practices change — though our commitment is that the direction of change will always be toward more privacy, never less.

Your position.
Your terms.
Your privacy.

Pseudonymous accounts. No KYC. Create a handle, take positions, and collect in XMR — your identity stays yours.