Privacy

Last updated: July 2026

Data controller

Association SWAPSAC
French non-profit (loi du 1er juillet 1901)
RNA: W013005264
172 K allée des Cascatelles
01280 Prévessin-Moëns, France

Contact: hello@swapsac.com

What we collect

Email address - for login and account recovery only
Password - stored encrypted (bcrypt), never readable
Username - public identity
City - to show nearby items
Messages - private between participants
Profile photo - only if you add one

What we don't collect

Phone numbers
Exact address
Browsing history
Device identifiers
Analytics or tracking pixels

Notifications

We send you an email when someone starts a conversation about one of your listings - nothing else. No newsletters, no digests, no SMS, no push notifications.

You check the app when you want to. We only reach out when someone is waiting for a reply.

Where your data lives

Database: Supabase – Frankfurt, Germany

Application: Koyeb – Frankfurt, Germany

No data leaves the European Union. No third parties have access.

How long we keep it

Until you delete your account. After deletion, all your data is permanently removed within 48 hours.

Your rights

You can:

Access everything we have about you
Correct your email or profile
Delete your account and all messages
Export your data (JSON format)

To exercise these rights, write to: hello@swapsac.com

One cookie: uid. Strictly necessary for login. No tracking. No ads. No third-party cookies.