01Who runs Swapath
Swapath is operated by Gökhan Topçu, an individual based in Slovakia.
For questions or requests about your data, email [email protected].
02Information we use and why
Google sign-in provides your account identifier, email and, when available, name and photo. We store your chosen username, listings, photos, wanted items, swap locations, requests, approvals and chat history, including read status and dates. Support emails include your address, message and attachments.
We use this information to provide your account, listings, swaps, chat and service notifications, and to answer support requests. This is based on our agreement with you or steps you request before joining. Browsing public listings needs no account; participating requires the relevant account and swap details.
Automatic Multi swap suggestions compare wanted and offered items and selected locations. Suggestions may reserve listings, but every participant decides whether to approve.
We use connection, error and delivery logs for our legitimate interests in security, preventing misuse and fixing faults. We handle privacy requests to meet legal obligations. Optional analytics is based on your consent.
03What others can see
Listings, photos, wanted items, swap locations and your public name are visible to visitors. Signed-in members can view your profile and available listings. Your public name is your username or a masked sign-in name; photos and descriptions may still identify you.
Your account email is not displayed publicly. Chat messages are shared with the participants, stored by Swapath and not end-to-end encrypted. Only share personal details you are comfortable giving to their readers.
04Providers and international transfers
We use providers for sign-in, hosting, security, storage and email. They process the account, content, correspondence and technical data needed for their roles.
Our main hosting locations are Ireland, the Netherlands and Germany. Providers may also process data outside the European Economic Area, including the United States, Singapore and India.
Our hosting, sign-in, database, notification-email and security providers' standard agreements include safeguards such as EU Standard Contractual Clauses or applicable adequacy frameworks. Google also provides transfer safeguards; our support-mailbox provider describes safeguards for international support access. Email [email protected] for details and copies.
05Browser storage and optional analytics
Browser storage supports sign-in and remembers your language and favorites. Clearing site data removes those preferences and may sign you out.
Google Analytics stays off until you allow it. It measures visits, traffic sources and page usage using browser and device information, page addresses and titles, URL parameters, referring pages and campaign details. Advertising signals and personalization are disabled.
Your analytics choice and our analytics cookies last 180 days. You can change your choice through Analytics preferences in the footer; refusing analytics does not affect your account or swaps.
06How long we keep data
Account data stays while you use your account; listings and photos stay until deletion. An account-deletion request starts a review of related records, including data shared with other participants, to remove what is no longer needed.
At monthly reviews, we delete rejected or withdrawn requests more than 12 months after closure, and ordinary support emails more than six months after resolution. Matches and chats inactive for 12 months are reviewed and deleted or anonymised unless needed for an ongoing exchange or specific dispute.
Records needed for a specific legal obligation, complaint or dispute are kept only while that need lasts.
Technical logs, any provider backups and Google's stored analytics have separate provider retention schedules. Deletion may take longer to reach those copies. Contact us for details relevant to your data.
07Your choices and rights
You can delete an eligible listing from My items. This does not erase your account or past swaps and messages. For deletion of your account or other personal data, access, correction or a portable copy, email [email protected]. We may verify that the account is yours.
Where applicable, you can restrict processing, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing.
Under the GDPR, we respond without undue delay, normally within one month. We explain any permitted extension within that month. You can complain to a data protection authority, including where you live or work or where an infringement occurred.
08Policy updates
The date above shows the latest revision. We will update this notice when our use of data changes and communicate material changes where required.