Privacy Policy (GDPR)
Last updated: February 2026
1. Data We Collect
We collect: email address, display name, location (city level), item listings, messages, swap history, and usage analytics. We do NOT collect exact GPS coordinates unless explicitly enabled by the user.
2. Purpose of Processing
Your data is used to: provide the swap matching service, moderate content for safety, send notifications about your swaps, and improve the platform experience. We do not sell your data to third parties.
3. Legal Basis
Processing is based on: your consent (account creation, cookie acceptance), contract performance (swap facilitation), and legitimate interest (platform security, fraud prevention).
6. Your Rights (GDPR)
You have the right to: access your data (available in your profile), correct inaccurate data, delete your account and all associated data, export your data, withdraw consent, and lodge a complaint with your national data protection authority.
7. Data Retention
Deletion requests are processed within 30 days. Data that is not required for an overriding legal, security, fraud-prevention, dispute-resolution, accounting, or integrity obligation is deleted or anonymized. Where limited records must be retained for one of those purposes, access remains restricted and the records are kept only for as long as the applicable purpose requires.
8. Contact
For privacy requests, contact privacy@swaply.world.