Nexus Market Privacy Policy

1. Introduction

This Privacy Policy describes how Nexus Market ("we", "our", "us") handles user privacy when using our onion v3 services accessible via Tor Browser. Our commitment to absolute privacy forms the foundation of all operations.

2. No Logs Policy

2.1 We do not log, store, or record any user connection data including but not limited to:

• IP addresses (entry, middle, or exit nodes)
• Timestamps or connection durations
• User agent strings or browser fingerprints
• HTTP request headers or metadata
• Page views, click tracking, or analytics

2.2 Server logging disabled at syslog and kernel levels. All operations memory-resident only.

3. No Personal Information

3.1 No collection of personally identifiable information (PII):

• No email addresses, phone numbers, or real names
• No Know Your Customer (KYC) verification
• No government-issued identification
• Anonymous PGP public keys only

3.2 Account identifiers are randomly generated session tokens. No linkage to external identities.

4. Tor Network Requirements

4.1 Access exclusively through Tor Browser to onion v3 endpoints. Clearnet access prohibited by design.

4.2 Three-hop circuit isolation enforced. New circuit required per session (Ctrl+Shift+L).

5. PGP Encryption Standards

5.1 All private communications PGP encrypted end-to-end using 4096-bit RSA keys.

5.2 Private keys never stored on Nexus servers. Public keys stored as unlinked hashes only.

5.3 Official Nexus PGP fingerprint: G2H3I4J5K6L7M8N9O0P1Q2R3S4T5U6V7W8X9

6. Monero Privacy Protocol

6.1 Monero (XMR) transactions only. RingCT v2 signatures with 12-16 ring size minimum.

6.2 Stealth addresses generated per transaction. No address reuse permitted.

6.3 2-of-3 multisig escrow. Transaction amounts unlinkable from user identities.

7. Data Retention Policy

7.1 Zero data retention after session completion. All temporary data purged immediately.

7.2 Order dispute data retained only during active resolution period (maximum 30 days).

7.3 No backups containing user data maintained.

8. Third Party Disclosure

8.1 No disclosure of user data to third parties under any circumstances.

8.2 No government requests honored. No data available to provide.

8.3 Open-source components audited. No proprietary analytics or tracking.

9. Security Audits

9.1 Regular independent security audits by trusted third-party researchers.

9.2 Bug bounty program active. PGP-signed vulnerability disclosures only.

9.3 All code changes PGP-signed by core development team.