fund your burner
Torpad never holds your money. SOL lands directly on the burner key that lives in this tab.
Monero in, SOL out
Quotes come from the Trocador aggregator, which compares exchanges for you. Torpad only asks for providers with KYC rating A: no identity check, ever. You pick the exchange, send the exact XMR amount to the deposit address shown, and the exchange sends SOL straight to your burner pubkey. Zcash, Bitcoin and Litecoin work the same way; you can also send SOL directly from another wallet.
What the server keeps
One row linking the deposit address to your burner pubkey, with amounts and timestamps, so the worker can track the order and you can come back for a refund. It is deleted 7 days after the order ends. Nothing is written to logs and there is no lookup by pubkey; only the random order id finds it. This tab keeps the order id in memory only: reload and it is gone.
Residual risk: timing correlation
Monero hides sender and amount on-chain, but the exchange sees both legs and the SOL leg is public. Someone watching both can match an XMR deposit of X at time T with X × rate landing on a fresh pubkey minutes later. Fund in round-ish amounts, wait before the first trade, split across exchanges, and never reuse a burner across unrelated activity.
Through the onion, never from your browser
Every call to the exchange goes through the Torpad server; the exchange sees the server's address, not yours. The full flow, retention policy and provider details are in the docs.