Privacy at SlapSwap

This describes how SlapSwap handles personal information when you use our marketplace for collectors in the United States and Canada, including browsing, buying, selling, trading, and the social features around them. It covers the SlapSwap website and app.

We collect what the marketplace needs to work, and no more than that:

• Your account. Email address, a handle and display name, and an optional avatar or bio. Your password is handled by our authentication provider and stored only in hashed form. We never see it.
• What you list and collect. Listings, collection items, the photos you upload, offers, trades, purchases and sales, and the reviews and reputation signals tied to your activity.
• Orders and shipping. Shipping addresses, order status, and tracking information, exchanged with the carrier to move an item to you.
• Payments. Card and bank payments are processed by our payment provider (Stripe). We do notstore full card numbers. The payment provider holds those. We keep records of transactions, payouts, and refunds. Sellers who take payouts complete the provider's identity onboarding, and that identity information is held by the payment provider.
• Messages. Direct messages and chats between members, which we store to deliver them and to keep the marketplace safe.
• Device and usage data. Basic technical information needed to run and secure the service, aggregate performance metrics (page-speed measurements), and If you opt in, we also store the push-notification subscription for your device.

• Run the marketplace: show listings, process orders, and move money and items.
• Operate the held-not-paidmodel. A buyer's payment is held until the item arrives and is confirmed (see Trust & safety).
• Keep people safe: prevent fraud, screen for stolen items, and moderate content and conduct.
• Communicate with you about orders, offers, disputes, and account matters.
• Improve reliability and the product, and meet legal and tax obligations.

We do not sell your personal information. We share it only with the services that make the marketplace run, and where the law requires it:

• Our payment provider, to process payments, payouts, and refunds.
• Shipping carriers and our shipping-label service, to fulfil and track orders.
• Our hosting and infrastructure providers, to store data and serve the site.
• Other members, but only the parts of your activity you make visible, such as your public profile, your listings, and reviews. Your collection's visibility is yours to set in privacy settings.
• Authorities or parties when required by law, or to investigate abuse or theft.

• See and correct your account details from your profile and settings.
• Control who sees your collection in privacy settings.
• Turn notifications on or off, including push, from your device and notification settings.
• Request access to, or deletion of, your data. Reach us through Share feedback. Some records tied to completed transactions may be retained where we're required to keep them.

SlapSwap involves payments and shipping and is intended for adults. It is not directed to children, and we don't knowingly collect personal information from children under 13. If you are below the age of majority where you live, use SlapSwap only with a parent or guardian's involvement. The definitive minimum age and how we handle mixed-age households are for counsel to set. This draft states our intended posture, not a final rule.

We protect information in transit, keep payment credentials with our payment provider rather than on our own systems, and store passwords only in hashed form. We keep personal information for as long as your account is active and as needed to provide the service and meet legal, tax, and dispute obligations. Specific retention periods are still being finalised with counsel and will be stated here in the final policy.

We'll update this policy as the product and our practices change, and we'll note when it was last reviewed. Questions about your data? Reach us through Share feedback. The final policy will list a dedicated privacy contact.