A venue that asks for no identity should be able to say precisely what it does hold. This is the complete list, and it is checkable against the source.
Only when you sign an order. It is already public on chain, and it is what settlement needs to move your side of a trade.
Stored until they expire or fill, because a resting order that nobody can see is not an order. Cancelling removes it.
Read to rate-limit abuse and, where a jurisdiction policy applies, to enforce it. Held in memory for the duration of the limit window and never written to disk.
Stores which of six languages you chose. Nothing else is in it.
Your theme, price alerts and your venue session key are kept in your own browser storage. They are never transmitted to us, and clearing site data removes them permanently — including the session key, which is why revoking on chain is the reliable way to end a session.
Keeping no record means we also cannot prove you accepted the terms, cannot restore anything you lose, and cannot help if you send funds to the wrong address. Those are the costs of the design, and they are real.
Not yet in force. The mechanism is built and inert: no restricted-jurisdiction list has been reviewed or adopted, so nobody is currently refused. Using OpeniBank from a place where it is not permitted remains your responsibility until this says otherwise.
See also the custody model and terms.