Cookie Policy

Last updated: 19 June 2026 · Version 1.0

VND Exchange ("the Operator", "we", "us") is a private exchange service with no separate legal entity. We act as a principal counterparty: we buy and sell the asset on our own account for one-off exchange operations. We are not your agent, broker, fiduciary, adviser, or custodian, and we owe you no best-execution or advisory duty. We are not a bank, a credit, payment, or e-money institution, a broker, a licensed FX agent, or a licensed crypto exchange, and we are not licensed or supervised by the State Bank of Vietnam or by any other authority. Crypto, including USDT, is property (a digital asset) and never money, legal tender, or a means of payment. Nothing here is investment, legal, or tax advice.

The only channel through which we operate and through which you can reach us is the Telegram bot and mini-app @VNDExchangeRobot. We publish no support handle, email address, registration number, or licence.

This Cookie Policy covers the website, the Telegram bot, and the mini-app. Read it together with our Public Offer, Privacy Policy, Consent to Processing of Personal Data, AML / KYC Policy, Risk Disclosure, and Refund & Cancellation Policy. Where this Policy and the Privacy Policy overlap on what is stored in your browser, read them together.

1. What a cookie is

A cookie is a small text file a site stores in your browser. Similar technologies — local storage and session storage — do much the same job. We use the word "cookie" in this Policy to cover all of them on the website.

2. The website and the mini-app store data differently

2.1. The website is where cookies apply. It is mostly a marketing surface and a live-rate calculator.

2.2. The mini-app does not use browser cookies. It runs inside Telegram and relies on Telegram's own WebApp storage to keep the interface working during a session. That storage is governed by Telegram, whose terms and privacy policy we do not control. Nothing in sections 3 to 5 about website cookies applies to the mini-app.

3. Cookies we set on the website

3.1. Strictly necessary cookies. These keep the site working: they remember your language, your theme (light or dark), and whether you have seen the cookie notice. The site cannot run properly without them, so they are set without asking. They carry no advertising data.

3.2. First-party analytics and attribution. We measure use of the website on our own infrastructure to run and improve the Service. We do not store your raw IP address for this; we store a one-way hash of the form sha256(IP + SALT), which lets us de-duplicate visits without keeping the address. We set a first-party session identifier (vnd_sid) that links a visit to an exchange request you later start in the bot, so we can see which entry points lead to orders, and we read campaign tags (UTM parameters) from the link you arrived through. This measurement is first-party only: we do not embed a third-party analytics network such as Google Analytics, we do not load advertising or social-tracking pixels, and none of it is shared with advertisers. Because it is our own first-party measurement and carries no third-party tracking, it runs as a standard part of operating the website, on the basis of our legitimate interest in running and securing the Service, rather than by prior consent. You can limit or remove these cookies at any time through your browser, as described in section 4.

3.3. We do not sell what cookies collect, and we do not use it to build advertising profiles or share it with ad networks.

4. The cookie notice and your controls

4.1. On your first visit the website shows a short notice that we use cookies, with a link to this Policy. Dismissing the notice only records that you have seen it; it does not switch any cookie on or off.

4.2. We do not use third-party advertising or cross-site tracking cookies, so there is no ad-consent choice to make here. Our analytics is first-party and is described in section 3.2.

4.3. Your browser is the control. You can block or delete cookies for this site, or for all sites, in your browser settings; blocking the strictly necessary cookies in section 3.1 may break parts of the website. Most browsers also offer a private mode that discards cookies when you close the window.

5. How long cookies last

5.1. Session cookies are deleted when you close the browser. Persistent cookies — the language and theme preferences, the record that you have seen the cookie notice, and the analytics identifier — stay until they expire or you clear them. We set persistent cookies to expire within a year and refresh them as you keep using the site.

5.2. The retention of the data behind the hashed analytics identifier is dealt with in the Privacy Policy, not by the cookie's own lifetime.

6. Changes to this Policy

We may update this Policy. The current version, with its date and version number above, is the one that applies. Continued use of the website after an update means you accept it.

7. Contact

Anything about this Policy, including how to exercise the choices in section 4, goes through the Telegram bot and mini-app @VNDExchangeRobot. We maintain no other contact channel.