Overview
GuavaSwap operates as a non-custodial cryptocurrency exchange interface at guavaswap.io, launched with a minimalist ethos: swap digital assets without creating an account or surrendering personal information. The platform does not custody funds; instead, it aggregates liquidity from external providers, currently FixedFloat and ChangeNow, to execute fixed or floating-rate exchanges. Users select a currency pair, provide a receiving address, and send funds within a time window. The service emphasizes accessibility through its Tor onion mirror and fully open-source codebase, catering to users who prioritize operational privacy over institutional polish. However, its aggregate scores reflect significant caveats: a privacy score of 0/100 and trust score of 1/100, alongside an overall 6/10 rating that suggests functional utility tempered by transparency gaps.
Privacy & KYC
GuavaSwap sits at KYC Tier L1, Anonymous, meaning no registration, email, or government ID is required to initiate swaps. This pseudonymous model aligns with the no-KYC exchange category that privacy-conscious traders actively seek. Yet the privacy reality is more textured than the tier suggests.
- IP logging: The privacy policy discloses collection of IP addresses, browser types, and referring URLs in standard server logs, retained for 30 days for security and debugging.
- Order metadata: Wallet addresses, swap amounts, currency pairs, timestamps, and order status are collected and retained for 12 months before deletion or anonymization.
- Third-party exposure: All order data is transmitted to liquidity providers (FixedFloat, ChangeNow) to fulfill exchanges; their independent privacy practices apply to data they hold.
- No email requirement: The interface itself demands no contact information unless users voluntarily reach out for support.
For users routing through the Tor mirror, IP exposure to GuavaSwap's servers is mitigated, though the underlying liquidity providers may still see transaction patterns. The 0/100 privacy score likely reflects this structural dependence on third-party KYC policies and the platform's own logging practices, despite the anonymous entry point.
Supported assets & payments
GuavaSwap supports a deliberately focused asset set: Monero (XMR), Bitcoin (BTC), Lightning Network BTC, fiat currencies, and cash. This selection targets privacy-centric users, Monero's ring signatures and Lightning's layer-2 speed are natural complements to a no-signup model. The interface offers both fixed and floating exchange rates; fixed rates lock at order creation, while floating rates adjust with market conditions until execution. Fees are embedded in the displayed rate with no post-order hidden charges, though network miner fees are estimated at creation and deducted from output amounts. Users must fund orders within a displayed time window; expired deposits trigger an emergency resolution flow where users choose between current-rate completion or refund. Notably, the platform itself does not process fiat directly, fiat and cash acceptance refers to the broader liquidity network capabilities rather than native GuavaSwap functionality.
Security & custody
GuavaSwap's security architecture rests on non-custodial design: private keys never touch its infrastructure, and funds flow directly from user wallet to liquidity provider to destination address. This eliminates centralized honeypot risk but transfers all address-verification responsibility to the user. The platform explicitly warns that transactions are irreversible, erroneous addresses cannot be recovered. Browser session storage temporarily retains an order token for tracking active swaps, cleared automatically when the session closes. No advertising networks receive this data. The open-source nature of the interface allows code auditability, though the proprietary backends of FixedFloat and ChangeNow remain opaque. For sanctions compliance, GuavaSwap blocks users from OFAC-sanctioned jurisdictions and reserves rejection rights for orders flagged by liquidity providers.
Who it's for, verdict
GuavaSwap occupies a specific niche: traders who need rapid, no-KYC crypto-to-crypto swaps and accept third-party routing as a trade-off for convenience. The Tor availability and open-source frontend make it technically accessible to anonymity-maximizing users, though the 30-day IP retention and 12-month order record storage undermine hardline privacy expectations. Its abysmal trust and privacy scores signal that GuavaSwap should be treated as an interface layer rather than a standalone trust anchor, diligent users should independently verify liquidity provider terms before each swap. For Monero and Lightning users seeking pseudonymous access without account proliferation, GuavaSwap delivers functional utility. For those demanding zero-data architectures or long-term relationship trust, the platform's structural dependencies suggest looking elsewhere. As of 2026, it remains a viable tool in the no-KYC exchange toolkit, but one requiring informed, cautious use.