What We Collect
We store only pseudonymous handles and position data. No email, no government ID, no IP logs, no tracking. No behavioral data. No metadata. No telemetry. No analytics. The only personal information that exists is the pseudonymous handle you choose and the positions you take.
What We Don't Do
Every badge below is a technical fact, not a marketing claim. You can verify each by inspecting the network tab in your browser's developer tools.
No Cookies
No third-party cookies. No tracking cookies. No persistent cookies. Authentication uses a secure httpOnly session cookie containing only a session token — no personal data, no tracking identifiers.
No Analytics
No Google Analytics. No Mixpanel. No Plausible. No Fathom. No custom tracking. No pixel. No beacon. No event stream. We do not measure page views, clicks, scroll depth, session duration, or any user behavior whatsoever.
No IP Logging
Web server access logs are disabled. Your IP address is not recorded, stored, or processed. If you access through Tor or a VPN, we wouldn't know even if logs existed — but we ensure they don't.
No Fingerprinting
No canvas fingerprinting, WebGL fingerprinting, audio fingerprinting, font enumeration, or any technique that creates a unique identifier from your browser's characteristics. Your browser is not profiled.
No Identity Collection
Accounts use a pseudonymous handle you choose — no email, no government ID, no OAuth, no wallet connect. Your real identity does not exist in our system. Passwords are bcrypt-hashed and never stored in plaintext. Account deletion on request removes all associated data.
No Third-Party Scripts
The only external resources loaded are Google Fonts (Geist) and the CoinGecko price API. No ad networks, social widgets, CDN tracking, chat widgets, or any script that reports to a third party about your behavior.
Where Your Data Lives
Your data is stored server-side under your pseudonymous handle. Here's the complete inventory of what we store.
Pseudonymous handle
A self-chosen pseudonym you use as your identity on the platform. No email address. No government ID. No real name.
Positions
Your prediction market positions — side, amount, market ID, timestamp. Stored in our database under your pseudonymous handle only.
XMR payout address
A Monero subaddress you provide for receiving payouts. Set by you after login. Used only for settlement.
Password hash
Your password is bcrypt-hashed before storage. The plaintext password is never stored and cannot be recovered by anyone, including us.
What We Don't Store
No email addresses. No real names. No government IDs. No IP addresses. No browser fingerprints. No tracking identifiers. No analytics data. The only data we hold is your pseudonymous handle, hashed password, positions, and payout address. Account deletion on request removes all associated data — contact contact@xmrpredictions.org.
Why Monero Is the Only Currency for Private Prediction Markets
A prediction market denominated in a transparent cryptocurrency is a surveillance tool. Your positions reveal your beliefs, your information advantages, and your financial capacity. Monero ensures that even if you win big, nobody can trace it back to you.
Ring Signatures
Sender PrivacyEvery Monero transaction includes a ring of decoy signers — currently a minimum of 16. An observer cannot determine which member of the ring is the actual sender. This is mandatory and protocol-enforced. There is no "transparent mode." Every transaction is private by default, which means your prediction market winnings are indistinguishable from any other XMR transfer.
Stealth Addresses
Receiver PrivacyEvery transaction generates a one-time stealth address for the recipient. Even if you publish your Monero address publicly, nobody can scan the blockchain to determine which transactions were sent to you. Each payment creates a unique, unlinkable destination. This means if you withdraw prediction market winnings to your wallet, the payment is invisible to anyone monitoring your public address.
RingCT (Confidential Transactions)
Amount PrivacyRing Confidential Transactions hide the amount transferred in every transaction. Observers can verify that inputs equal outputs (no XMR created from nothing) through Pedersen commitments and range proofs, but the actual amounts remain encrypted. For prediction markets, this means nobody can see how much you wagered or how much you won — the amounts are cryptographically hidden.
Dandelion++
Network PrivacyTransaction propagation across the Monero network uses Dandelion++, which prevents observers from correlating a transaction with the IP address that broadcast it. Transactions are first sent through a random "stem" path before being "fluffed" to the wider network, making IP-based traffic analysis ineffective. Even sophisticated network-level adversaries cannot link your transactions to your physical location.
FCMP++ (Full-Chain Membership Proofs)
Next GenerationThe upcoming FCMP++ upgrade represents a paradigm shift in transaction privacy. Instead of selecting a ring of 16 decoys, FCMP++ proves that the real input exists somewhere in the entire blockchain without revealing which one it is. The anonymity set goes from 16 to the entire UTXO set — millions of outputs. This makes statistical analysis of ring membership patterns fundamentally impossible, providing the strongest sender privacy guarantee of any cryptocurrency protocol.
How We Compare
A side-by-side comparison of XMR Predictions against typical prediction market platforms.
| XMR Predictions | Typical Platform | |
|---|---|---|
| User accounts | Pseudonymous only | Email + KYC required |
| Position storage | Pseudonymous server-side | Linked to real identity |
| Analytics | Zero | Full behavioral tracking |
| IP logging | Disabled | Logged and stored |
| Settlement currency | XMR (private) | USD / ETH (traceable) |
| Transaction privacy | Ring sigs + stealth + RingCT | Public blockchain or bank records |
| Cookies | Session auth only | Session + tracking cookies |
| Data subpoena risk | Pseudonyms only — no real identities | Full user history available |
Built by a Privacy-First Team
XMR Predictions is built by the XMRHub team — the same team behind XMRHub and XMRMap, two established Monero ecosystem tools with a proven commitment to user privacy.
XMRHub
xmrhub.org ↗The central resource hub for the Monero ecosystem. XMRHub aggregates news, tools, educational content, and community resources for Monero users. Built with the same privacy-first principles: no tracking, no analytics, no identity collection. XMRHub demonstrates that you can build useful, information-rich web applications without surveillance infrastructure.
XMRMap
xmrmap.org ↗A real-time visualization of the Monero network's global node distribution. XMRMap renders network topology data without collecting any information about who views it. The tool processes node data server-side and presents it client-side with zero user identification. A demonstration that even data-intensive applications can be built without compromising the viewer's privacy.
Our Guarantees
We will never introduce analytics.
Not "privacy-respecting" analytics. Not "self-hosted" analytics. Not "aggregate-only" analytics. No analytics. The moment you measure user behavior, you've created a dataset that can be subpoenaed, breached, or misused. We don't create that dataset.
We will never require real identity.
Accounts are pseudonymous — a handle you choose, nothing more. We will never require email addresses, government ID, KYC verification, or any form of real identity. You can participate using only a pseudonym and a Monero address.
We will never collect more data than necessary.
We store only what is needed to operate: pseudonymous handles, hashed passwords, positions, and payout addresses. No email. No IP logs. No browsing history. No behavioral data. Account deletion on request removes all associated data.
We will never support a non-private settlement currency.
If settlement moves from simulated to real, it will be in Monero. Not Bitcoin (transparent). Not Ethereum (transparent). Not a stablecoin (custodial and transparent). The denomination is the privacy model. XMR or nothing.
We will never sell, share, or monetize user data.
The only data we store is pseudonymous handles and positions — no real identities, no behavioral data, no metadata to monetize. We will never sell, share, or provide this data to third parties. A breach would reveal only pseudonyms and positions, not real-world identities.
Privacy Questions
If you have questions about our privacy practices, want to verify a specific claim made on this page, or have identified a privacy concern, contact us through the channels listed on the Contact page. We take privacy inquiries seriously and respond to all good-faith questions.
This policy was last updated March 2026. We will update this page if our practices change — though our commitment is that the direction of change will always be toward more privacy, never less.
Your position.
Your terms.
Your privacy.
Pseudonymous accounts. No KYC. Create a handle, take positions, and collect in XMR — your identity stays yours.