Privacy
There is no RAH Swap account. The site does not ask for a name, an email, or a password.
What leaves the browser
A quote request includes the chain, the token addresses, and the amount. Public RPC providers and, when those sources are enabled, quote APIs such as Kyber, Sushi, ParaSwap, 0x, and 1inch receive that request. Connecting a wallet shares the address with the page and with the RPC used for balances. A signed swap is a public transaction.
Theme, swap history, and a few interface toggles stay in local storage on your device.
Analytics
No analytics script is loaded unless the operator sets NEXT_PUBLIC_ANALYTICS_SRC. Instructions are in the search-engine doc. The script, when present, is allowed by the existing nonce-based content security policy.