Legal

1. Who runs this site (Impressum)

Operator and contact

Name

Marius Madar (known as Marius, The Master Of Disaster)

Postal address (PO box)

OP Oradea 2 C.P. Nr. 9, Oradea, Bihor, Romania

Email

[email protected]

X

@YouBuyBitcoin

Phone

None. Write by email; if you can't use email, write to the PO box.

Status

Marius Madar runs the site as a private person, not a registered business, and is not registered for VAT. Some Orange Pages listings carry affiliate links that can earn a commission, and the site accepts donations. The domain has been held since 2017; the site has been built since 2026.

Editorial responsibility

Responsible for the content of this site: Marius Madar.

Law, complaints and dispute bodies

The site is run from Romania, under Romanian and EU law. The terms of use are in part 3, and how we handle data in part 2.

If something is wrong, write to [email protected] first; most things can be sorted out by email. You can also go to:

• Data protection: ANSPDCP, Romania's data protection authority (dataprotection.ro), or the authority in the EU country where you live, work, or where the problem happened.
• Consumer complaints in Romania: ANPC, the National Authority for Consumer Protection (anpc.ro).
• EU consumer disputes: the EU's Online Dispute Resolution platform closed on 20 July 2025. Find a national alternative dispute resolution (ADR) body at consumer-redress.ec.europa.eu; the European Consumer Centres Network (ECC-Net) helps with disputes across borders.

2. Privacy

Who is responsible

The controller is Marius Madar, who runs this site (part 1). Write to [email protected] about anything to do with your data.

We keep a written record of our processing, as GDPR Art. 30 requires. There is no data protection officer: a private person handling minimal, non-sensitive data, with no large-scale monitoring, doesn't need one (GDPR Art. 37(1)).

What we handle, why, and for how long

Your IP address is never stored. Every request reaches Cloudflare with it, as for any website. Where one of our workers needs to tell visitors apart, it turns the IP into a same-day code instead (below). User agents are not read. Records we must keep by law, and handling disputes, rest on a legal obligation (Art. 6(1)(c)) or legitimate interest.

We don't build advertising profiles, sell personal data, rent audience lists or share data with advertising networks.

Balancing test. Where we rely on legitimate interest, we have weighed it against your rights and freedoms. Each purpose uses the least data that still makes the feature work: the visits line uses random tab numbers, not made from your IP; votes, reads and Compare presses are kept as totals, and the only per-visitor records are same-day codes that end by midnight; rate limits use same-day codes, never the raw IP. Codes are 20 bits, so a stored code alone never points to one IP, and once the day's key is gone nobody can link a code to an IP. We consider the remaining impact on your privacy negligible.

Your right to object. You can object at any time to processing based on legitimate interest (GDPR Art. 21). Write to [email protected].

How the same-day codes work

Article votes and reads, /swap Compare presses, site search, the Orange Pages visits line and the live data all reach one of our seven Cloudflare Workers. None of them stores your IP address. Where a worker needs to tell visitors apart, it does not keep your IP. It makes a short code from it: an HMAC-SHA256 of the IP under a key of 32 random bytes made for that UTC day, cut to 5 hexadecimal characters (20 bits).

• Short on purpose. There are about a million possible codes and about 4.3 billion IPv4 addresses, so each code is shared by about 4,096 of them. A stored code alone never points to one address.
• Gone with the day. Each worker makes a new key every UTC day. The four workers that store theirs (feedback, swap, search, admin) delete it 5 minutes after midnight; the other three keep theirs in memory only and replace it on their first request of the new day. Once the key is gone, nobody, us included, can tell which IP made a code. Every stored record made from a code is deleted by midnight (a record written in the day's last minute lives its 60-second minimum).
• Shared addresses. People behind one IP address (a home, an office, a mobile network) get the same code, so they count as one visitor; one person on two networks counts twice.
• The limit, stated plainly. During the day, whoever holds that day's key could check whether a given IP made a given code (a wrong match about one time in a million), and several codes the same IP left under different labels narrow it further. That is why we call the codes pseudonymous, not anonymous, until the key is gone.

What the codes are used for:

• Rate limits (stopping floods): a counter per code. Counters in storage are deleted within 60 seconds of your last request. Counters in memory (every limit of the live data, mempool and live counter workers, and the feedback worker's limit on reading counts) are dropped on the first request after their minute, or when that copy of the worker stops. The three memory-only workers use a key each copy makes every UTC day and never stores.
• One vote per article per day: a lock that ends at UTC midnight, and your vote (up or down, tag, time) for up to 45 minutes while you can change it, ending at midnight. KV keeps any record at least 60 seconds, so one written in the day's last minute lives that long.
• One read per section, and one Compare press, per day: a mark that ends at UTC midnight (the same 60-second minimum applies).

Gates in our code check every change that none of our seven workers stores an IP, that every key made from a code expires in time, and that codes stay at 20 bits. Workers Logs ("Observability") is off on all seven workers.

Who else handles data

We keep this list short. Depending on what you use:

Cloudflare

Hosts the site and runs our seven Workers, Web Analytics, the search model, storage and caching. Cloudflare is our processor (data processing addendum). Your IP reaches Cloudflare's network with every request; a site hosted on Cloudflare can't avoid that. Cloudflare's own services (DDoS protection, firewall) process it under Cloudflare's privacy policy, and its dashboard can show the IP of a blocked or challenged request. Our Analytics Engine events never contain it. One thing no code can switch off: whoever has access to our Cloudflare account can watch requests live as they arrive ("wrangler tail"), and that view shows each request's IP. Cloudflare does not store that view, and we never save it. We use it only filtered to our own IP.

Microsoft 365

Holds our email ([email protected] and its aliases) if you write to us (privacy.microsoft.com).

GoDaddy

Registers our domain and runs the DNS that routes our mail to Microsoft 365 (GoDaddy privacy policy).

Anthropic (Claude)

When Marius asks, Claude, an AI assistant made by Anthropic, reads emails sent to [email protected] to sort them and draft replies. It can't send anything; Marius reads and sends every reply. Anthropic processes those emails to run Claude, under its own privacy policy; by our settings it doesn't train its models on them, except where that policy allows for safety reviews. Nothing about your visits, and no search query, goes to Claude or any other AI service; site search uses a model inside our own Cloudflare account.

Swap providers

When you compare rates, your browser asks our worker for each provider's quote. Who receives your comparison request: our worker, which runs on Cloudflare, our processor; and each swap service (ChangeNOW, SimpleSwap, FixedFloat, Exolix, SideShift, Godex, ChangeHero, n.exchange), which gets only the coin, the amount and our worker's Cloudflare address, nothing about you; for some, also our own API key. No header, cookie or address from your browser's request is passed on. Our worker turns your IP into a same-day code to limit requests (60 a minute; each counter deleted 60 seconds after your last request); the IP itself is never stored, logged or sent to a provider. Auto-refresh uses the same path and collects nothing more (how it works). The n.exchange link carries our referral code, set to 0%; when you open it, n.exchange's site may remember the code in your browser. Once you click through to a provider, you are on its site, under its privacy policy.

Market and chain data services

Our workers fetch public data from these services, on a schedule or when a cached copy is out of date. They receive our worker's Cloudflare address and no data about you: Binance, CoinGecko, CoinLore and Kraken (prices), mempool.space (blocks, fees, mining and Lightning data), Bitnodes (node count), DefiLlama, CoinGlass and Bitbo (market data), Yahoo Finance (S&P 500), the U.S. SEC (company filings) and a public Google Sheets file (central bank digital currency list). They act as independent controllers for the request metadata they receive.

Sites we link to

Orange Pages listings and other sites have their own privacy policies; when you open one, you leave our site. Some listings carry our affiliate link, always marked (part 4).

Donations

The donate page loads nothing beyond what every page loads: the addresses and QR codes are part of the page. If you pay the Lightning Address, your wallet contacts the service behind it, and that service can see the IP address your wallet connects from; this happens between your wallet and that service, not through our site. We receive no name, email or other personal data from a donation.

Fonts

Served from our own site. Your browser makes no requests to font services.

Transfers outside the EU

Cloudflare, Microsoft, GoDaddy and Anthropic are US companies and may handle data outside the European Economic Area. Cloudflare and Microsoft are certified under the EU–U.S. Data Privacy Framework and also use the EU's Standard Contractual Clauses; Anthropic relies on Standard Contractual Clauses. GoDaddy, which handles only our domain and routes our mail, describes its safeguards in its own privacy policy.

Your browser: no cookies, and what is stored

This site sets no cookies: none for analytics, advertising or sessions. (The operator's own admin login, on a separate address visitors never use, keeps one session cookie.)

Kept in this browser until you clear it (localStorage):

• Your theme (dark, light or blue), on every page with the top bar and on Swap.
• The Orange Pages: the listings you saved (☆), your saved views, the last 30 listings you opened, and when you last visited, so new listings can be marked.
• Learn: your reading progress, which sections were already counted, and your votes.
• Swap: your last coin and amount (for 24 hours), sats or BTC, your auto-refresh choice, the day of your last counted Compare press, and the version of our swap service (when it changes, your saved coin and amount reset).
• Copies of public data (prices, network data, Radar, listings, stats, the ship log), so pages load fast. They are replaced when they go out of date.

Kept for this tab only (sessionStorage), gone when you close it:

• The random number for the Orange Pages visits line.
• The Orange Pages: your Compare list, and the time of your previous visit.

Only that random number is sent to us, and a tag you add to a vote is sent with that vote. Everything else stays in your browser. Clear it any time in your browser's settings.

Most of what is stored only remembers what you chose: your theme, saved listings, reading progress. The random number and the counting marks (sections already counted, the day of your last Compare press) exist so each visitor is counted once. They are not linked to you, and we believe they need no consent. This storage falls under Romanian law 506/2004, which carries the EU's ePrivacy rules.

The visits line ("reading now · today · since") on The Orange Pages counts browser tabs, not people. Each tab makes a random number for the UTC day, keeps it in the tab, and sends it to our counter every 30 seconds while the tab is visible. The counter keeps the number for 90 seconds after the tab's last beat ("reading now") and once per day until 06:00 UTC the next day ("today"). After midnight it adds up the day's numbers into one total; only the daily totals are kept. The numbers are not made from your IP. The counter limits requests per visitor (30 a minute, and 5 new tab numbers a minute), counted in memory under a same-day code. Only pages on youbuybitcoin.com send the number; previews and test copies don't, unless a test switches it on.

Your rights

Under the GDPR you can ask us to:

• see the personal data we hold about you (Art. 15), such as your emails;
• correct it (Art. 16);
• delete it (Art. 17), unless the law makes us keep it;
• limit how we use it (Art. 18);
• give it to you in a portable format, where that applies (Art. 20);
• stop using it where we rely on legitimate interest (Art. 21);
• withdraw your consent at any time, for the thank-you list (Art. 7(3)).

Much of what we handle is totals or codes that end the same day, so some rights apply only to data that can be linked to you, such as your emails. We make no automated decisions about people, and no profiling (Art. 22).

We answer emails within 48 hours where we can. A request about your data rights is answered within one month, free of charge. If it is complex we may take up to two more months, and we tell you why within the first month. To complain, see part 1.

Security and breaches

We run no user accounts and keep no profiles. We use reasonable technical and organisational measures for the little data we handle, but no internet service can promise absolute security.

If a breach affects personal data, we tell the supervisory authority within 72 hours where the GDPR requires it (Art. 33), tell the people affected without undue delay where it puts them at high risk (Art. 34), and document what happened and what we did. Because we store no IP addresses, only same-day codes that last a day at most, random tab numbers and totals (plus the emails you send us, held by Microsoft 365), the realistic scope of a breach is small.

Children

This site is not made for children, and we don't knowingly collect personal data from anyone under 18. If you think a child has sent us personal data, write to [email protected].

3. Terms of use

What these terms are

These terms apply when you use YouBuyBitcoin.com, which Marius Madar runs (part 1). If they change, the new version applies from the date at the top, and you can stop using the site at any time. The privacy part tells you how data is handled; it is information, not something you agree to.

This site is for adults. If you are under 18, ask a parent or guardian first.

What the site offers

Free Bitcoin guides (Learn), a swap-rate comparison (Swap), a directory of Bitcoin businesses, tools and resources (The Orange Pages), market signals (Radar), live network data (Dashboard) and a glossary. We hold no funds and run no swaps; what we are and are not is in part 4.

You can contribute writing, translations or listing suggestions by email.

Fair use

When you use the site, please don't:

• use it for anything illegal, including money laundering, terrorist financing or fraud;
• try to get around its security, or into anything you aren't allowed into;
• spread malware, or flood, attack or disrupt the site;
• pretend to be YouBuyBitcoin, or anyone else;
• collect other people's personal data from it, or harass or harm others.

And give true information when you write to us. Copying and reuse are covered just below.

Using our work

Our writing is free to reuse. The Learn guides, the glossary, the FAQs, the Orange Pages listing texts and the other text we write are licensed CC BY-SA 4.0. Copy, share, translate and adapt them, also commercially, as long as you credit "YouBuyBitcoin.com" (for listings, "The Orange Pages — YouBuyBitcoin.com") with a link to the page and to the licence, say what you changed, and share your version under the same licence.

AI tools may read our pages, quote and summarise them, and learn from them on the licence's terms. When they quote us, they name us and link to the page. Our robots.txt welcomes their crawlers.

Not covered by the licence:

• The site's design, layout and code: © 2026 Marius Madar, as far as copyright applies.
• The Orange Pages as a whole: which businesses are in it, their labels, their order, and the data file. Look listings up, link to them, quote them, and reuse a listing's text under the licence. Copying the directory as a whole, scraping it on a schedule, or offering it as a data product, feed or API needs our written permission, and robots.txt asks AI crawlers to skip the data file. The Export button is for your own use. Copies of the directory downloaded before 25 October 2026 keep the CC BY-SA licence they came with.
• "YouBuyBitcoin" and "The Orange Pages" are names we use, not registered trademarks, and the licence doesn't cover them or our logo. Use them to say what you mean, not to suggest we run, endorse or partner with your project.
• The names and logos of listed businesses and swap services, which belong to them.
• Material by others: quotes from news reports, providers' statements and reviews, and texts we credit to their sources (for example the Satoshi Nakamoto Institute or bitcoin.org). Their own terms apply.
• Live data and charts, which come from the sources we name; their terms apply.

For anything the licence doesn't cover, ask at [email protected].

Contributions

If you send us writing or a translation to publish, you keep your copyright and license it under CC BY-SA 4.0, so it can be published and reused like the rest of our writing.

The 21% pledge

Money the site earns pays for hosting, tools and the time of the people who build it. If there is a net profit, 21% of it goes to Bitcoin education: a public pledge, not a legal obligation. Net profit is what is left after costs and taxes.

• Transparent: every pledge payment is published with its transaction ID.
• Verifiable: anyone can check a pledge payment on-chain.
• Open to ideas: suggestions for where it goes are welcome.

Pledge payments start once there is net profit, and are made in bitcoin. Donations to us stay private: we never publish who gave or how much, unless you ask to be thanked by name.

Liability

The site is free and provided as it is. We work to keep it accurate and running, but we can't promise it is always complete, current, error-free or available.

We are not liable for price moves, for a provider's failure or hack, or for the choices you make with what you read here. Otherwise our liability is limited to €100. None of this limits liability for death or injury, for harm caused on purpose or by gross negligence, for fraud, for data-protection claims, or any right consumer law gives you.

Law and disputes

Romanian law applies. If you are a consumer, the mandatory rules of your own country still protect you, and you can go to court there or in Romania. Please write to [email protected] first; most things can be sorted out by email. The dispute bodies are listed in part 1.

We may block misuse, remove content that breaks these terms or the law, and change or end features at any time. If part of these terms is found invalid, the rest still applies, and not enforcing a right doesn't give it up.

4. Disclaimers and risks

What we are and are not

YouBuyBitcoin.com is a free Bitcoin information hub: guides, a swap-rate comparison, a directory of Bitcoin services, market signals, live network data and a glossary.

We are not an exchange, broker, custodian or financial institution, and not a crypto-asset service provider under the EU's Markets in Crypto-Assets Regulation (MiCA, 2023/1114). We don't:

• hold, store or move bitcoin, other crypto-assets or money for you;
• run swaps or trades: the providers do, and each is responsible for its own regulatory compliance;
• have access to your wallets, keys or funds;
• ask for identity checks (providers may);
• give financial, investment, legal or tax advice, personal recommendations, or guarantees of any outcome.

Nothing here is financial advice. Everything is for education and information. Do your own research, and consult a licensed professional before financial decisions. In the EU, check that a provider you use is authorised under MiCA or national law.

How we earn, and what earns nothing

Affiliate links: The Orange Pages only. Some listings carry our affiliate link. If you sign up or buy through one, the service may pay us a commission; the amount depends on its programme. It doesn't change your price, and never changes a listing's place in the order. The plain link to the same service is always right beside it.

The Orange Pages use two tags. Affiliate: we may earn a commission; the link is marked rel="sponsored" for search engines. PROMO: a discount for you; we earn nothing from it.

The swap comparison earns nothing, so no commission can influence it. Providers are ordered by their live quote, best first. We show live rates from ChangeNOW, SimpleSwap, FixedFloat, Exolix, SideShift, Godex, ChangeHero and n.exchange (its DeFi mode only). SimpleSwap, ChangeHero, FixedFloat and n.exchange give us a free key to read their prices. n.exchange issues its key only with a referral code. Ours is set to 0% and is in the n.exchange link too: a visit without it gets about 0.85% less BTC on n.exchange's own site (six coins, measured 22 October 2026), so with it you get the rate shown here. It earns us nothing, as n.exchange confirmed in writing, and their site may remember the code in your browser. Every link on the Swap page is plain, except n.exchange's, which carries that 0% code. Providers may be added or removed at any time; changes are logged in our ship log.

This disclosure follows EU Directive 2005/29/EC on unfair commercial practices (in Romania, Legea 363/2007) and Directive 2000/31/EC on electronic commerce; we also follow the US FTC's guides on endorsements (16 CFR Part 255).

Provider security history

In the interest of full transparency, we disclose known security incidents affecting swap providers listed on this site, and the Orange Pages listings that carry our affiliate link. We believe you deserve this information before choosing a provider.

• FixedFloat: Hacked twice in 2024: about $26M stolen in February (Decrypt, 19 Feb 2024), and a second hack in April reported at about $2.8M (ForkLog, 3 Apr 2024). FixedFloat states user funds were not affected. User fund impact: FixedFloat claims no user losses. The exchange service at ff.io is provided by FixedFloat. YouBuyBitcoin.com holds an account with FixedFloat and uses its free key only to read prices for the comparison. We don't use a referral code, so swaps made through the comparison earn us nothing.
• Trezor (Orange Pages listing with our affiliate link): Two breaches at third-party vendors in 2026: its shipping provider ShipMonk (disclosed 13 August 2026; contact and shipping details of 80,689 customers, per Trezor's update of 4 September) and its newsletter provider Brevo (disclosed 10 September 2026; 347,149 marketing email contacts exported, followed by fake "security alert" emails asking for wallet backups) (Trezor: shipping provider, Trezor: Brevo). Trezor states that its own systems, hardware wallets, private keys and wallet backups were not affected. Expect phishing: never enter your recovery words anywhere except on the device.
• BitBox (Orange Pages listing with our affiliate link): In September 2026 attackers used a flaw at Brevo, BitBox's newsletter provider, to export its subscriber list and send a fake "security alert" asking for recovery words (BitBox statement, German; The Register, 10 Sep 2026). BitBox states that only subscriber email addresses were exposed and that its own systems, the BitBoxApp and BitBox devices were not compromised. Expect phishing: never enter your recovery words anywhere except on the device.
• ChangeNOW: On 15 October 2026 ChangeNOW announced that independent security researchers had found a vulnerability in an integration used on its website, now fixed (its own statement, published as a sponsored press release on Decrypt, 15 Oct 2026). ChangeNOW says it has no evidence the flaw was exploited, but that the information that could have been exposed "may include email addresses and transaction details", and it warns clients to watch for fake messages that mention real transactions; it says it contacts clients only from [email protected]. We found no independent confirmation. Separately, an unconfirmed breach claim was made by the Lapsus$ alliance in 2025; ChangeNOW categorically denied it. User fund impact: None reported. ChangeNOW states customer funds were not at risk; the possible exposure is email addresses and transaction details.
• Exolix: On 28 May 2026 a security researcher (RasterSec) disclosed that Exolix's partner API returned full swap histories (deposit and withdrawal addresses, transaction hashes, amounts and timestamps from 355,944 swaps, January 2025 – May 2026) to anyone holding a partner's API key; some of those keys were found in public code. The researcher reports that Exolix described the access as "a feature, not a bug" requested by partners and added firewall rules; we found no statement from Exolix itself. User fund impact: No theft of funds or private keys was reported; the exposure can link a swap's deposit and withdrawal addresses.
• n.exchange: No known hacks or data leaks as of October 2026. We link only its DeFi mode, launched in June 2026. n.exchange says that in the DeFi path it "does not take custody or control of the deposited funds during the swap" (n.exchange), and told us in writing (15 October 2026) that the DeFi deposit address is "controlled by smart contract logic" and that funds "can only be routed to the designated payout address or returned to the specified refund address". We have not verified this ourselves. Its terms (revised 26 February 2026) do not separate DeFi from its standard mode: they allow it to "freeze or hold assets or activity" under its anti-money-laundering program, to "pause transactions pending completion of CDD/EDD" and to ask for a selfie with ID and proof of source of funds (terms).
• SimpleSwap, SideShift, Godex, ChangeHero: No known hacks or data leaks as of October 2026. During a swap your coins pass through the provider (you send them to its deposit address and it sends the Bitcoin on), so a provider can pause a swap it flags for checks; SimpleSwap's terms, for example, reserve the right to freeze flagged funds.
• Compliance holds (user reports): Separately, some users report funds held for KYC/AML review at ChangeHero, FixedFloat and n.exchange in 2026 (Trustpilot reviews for ChangeHero, FixedFloat and n.exchange; none of the n.exchange reports mentions its DeFi mode). Since September 2026, kycnot.me shows a warning on ChangeHero about several reports of withheld large swaps, including a BitcoinTalk case where the user got the funds back only after extensive KYC and going public. These are user reports, not security incidents.

Always do your own research (DYOR) before using any swap provider. Non-custodial does not mean risk-free. Check each provider's current security status and only swap amounts you can afford to lose.

Accuracy, and how /swap checks its quotes

Rates, listings, guides, dashboard and Radar figures can be out of date or wrong. Rates come from the providers and can change between seeing them and swapping; the final rate can differ through network fees, slippage or the provider's own changes. When no provider answers: /swap may show estimated rates, each marked Estimated, and every provider's own site stays one click away. Check before you act.

Auto-refresh (every 10, 20 or 30 seconds)

What it does. After you click Compare Rates at least once, we re-fetch quotes from all providers every 30 seconds (or every 10 or 20, if you pick it) so the rates you see stay current. Swap rates drift in seconds — a 5-minute-old quote can be meaningfully wrong. The rolling refresh keeps the comparison honest while you deliberate.

When it pauses. The refresh pauses automatically when the /swap tab is hidden, when you've been idle for 15 minutes, or when you click OFF next to "Auto-refresh every 30s". It resumes when you return to the tab unless you've explicitly switched it off.

How to disable it. Click OFF next to the timer on the /swap page. Your preference is stored in your browser's localStorage (key ybb-swap-auto-refresh) and remembered on future visits. If you'd rather never auto-refresh, toggle it off once; the site will respect that across sessions.

How the sanity check works

What "sanity check" means here. When at least 3 live swap quotes land in the results table, we compute a peer median across them. That median is the comparison reference behind the outlier filter, and so behind the "Best Rate" badge, which needs at least 4 live quotes. The footer line at the bottom of the results ("Sanity check: …") shows you the inputs we used to rank this particular comparison.

Peer median N BTC. The middle value of all live quotes, sorted. Half the quotes fall above it, half below. Using the median (not the average) means one outlier — a provider momentarily returning a wildly wrong rate — doesn't skew the reference. The median stays stable even when one quote goes haywire.

Reference <source> within X%. We also fetch a separate BTC/USD price from an external feed (CoinGecko primary, CoinLore fallback, Kraken fallback) and compare the peer median against it. If the two agree within 5%, the reference line renders in green ("within 1.2%") — that's a positive confirmation that our peer consensus tracks the broader market.

Reference <source> diverges X%. Same comparison, but the peer median and external reference disagree by more than 5%. One of them is stale or wrong, and we can't tell which without more signal. Amber coloring flags the uncertainty. The comparison still ranks providers, but you should verify the final rate on the provider page before swapping.

"Best Rate" badge rules. The badge goes to the highest live quote whose rate stays within peer-median tolerance (±10%). A provider returning an unusually generous quote that's 15% above the peer median gets excluded from the badge — their quote looks good on paper but is likely a glitch that won't hold at execution time. We'd rather badge the honest #2 than the possibly-broken #1.

What updates this. At each refresh while the /swap tab is visible and auto-refresh is on (see the section above), we re-run the full pipeline: fresh quotes, fresh peer median, fresh reference delta, fresh badge. Numbers drift slightly as provider quotes and BTC/USD drift — that's normal market motion, not instability.

Other sites and listings

Links to swap providers, Orange Pages listings and other sites take you off our site, to their own terms, privacy policies and risks. We don't control them, and we aren't responsible for their actions, security, uptime, fees, rates or failures. Some providers and listings ask for identity checks: that is their requirement, not ours. Swaps and purchases may be taxable where you live; a tax professional can tell you.

Being listed or compared is not an endorsement or a guarantee. Before a listing is published, its claims are checked against the business's own site, documents, announcements or code, then official registries and regulators, then reputable press; the Orange Pages FAQ lists every check. The check is best-effort, not a guarantee, and doesn't replace your own.

How things are ordered. The Orange Pages follow a Bitcoin-first order set by fixed rules, explained in the Orange Pages FAQ. /swap orders providers by their live quote, best first. No one can pay for a place, and an affiliate link never changes it.

Listed businesses can ask us to correct a listing at any time: send us the page that shows the fact. Our dashboard and Radar figures come from the market and chain data services named under Privacy.

Where you live

Rules on Bitcoin differ from country to country. Using this site, and the services it links to, lawfully where you live is up to you, including tax, anti-money-laundering and identity rules.

Some swap services limit where they serve: SimpleSwap's and ChangeHero's terms restrict use from the EU, ChangeNOW asks residents of the EU and 8 other places for ID first, and some exclude other countries, such as the USA or sanctioned ones. Check a service's terms before you use it.

Bitcoin risks

High-risk investment: Cryptocurrency is highly volatile and speculative. You can lose all of your investment. Only invest what you can afford to lose completely.

Risks include but are not limited to:

• Volatility: Bitcoin and other cryptocurrencies experience extreme price swings
• Loss of funds: Sending to wrong address, lost private keys, hacks, scams
• Regulatory risk: Governments may ban, restrict, or heavily regulate cryptocurrency
• Technology risk: Bugs, network failures, hard forks, or protocol changes
• Scams and fraud: Cryptocurrency attracts scammers — fake exchanges, phishing, social engineering. Learn to protect yourself: Advanced Security
• Exchange/counterparty risk: If you trust a third party with your Bitcoin, you carry their risk. Not your keys, not your Bitcoin
• Liquidity risk: You may not be able to sell at your desired price or time
• No consumer protection: Unlike banks, cryptocurrency transactions are irreversible
• Tax implications: Crypto transactions may be taxable in your jurisdiction

Past performance does not indicate future results. Historical price increases do not guarantee future gains.

How the site is written

Claude (by Anthropic) drafts the site's text and code at the site operator's direction and does the research the operator asks for. The site operator reviews each piece, corrects it until approving it, and only then does it go live. Earlier articles were also researched with Perplexity. AI assistance does not substitute for human editorial responsibility. The guides are not written by licensed financial professionals.

Donations

Donations are voluntary: in bitcoin, Lightning, Monero and Zcash, on our donate page. Nothing on this site asks for payment, and listing a business in The Orange Pages is free.

• A donation buys nothing: no product, service, priority or placement, and no say over what we publish.
• Payments on these networks can't be undone, so donations can't be refunded.
• YouBuyBitcoin.com is not a registered charity, so a donation may not be tax-deductible where you live.
• Donations help pay for running and building the site; see the 21% pledge.
• If you ask, we thank you on the donate page by the name or handle you choose, with the month (Privacy).

Changes to this page

When this page changes, the date at the top changes, and the change gets a line in our ship log, which the homepage shows.

Questions about anything on this page: [email protected].