Privacy Policy
Last updated: February 22, 2026
1. What We Collect
When you use SwapYard, we collect:
- Account information — your email address and OAuth provider identity (Google or Discord display name, avatar).
- Profile information — your display name, city, meetup radius, preferred local game store (LGS), and contact method. These are provided voluntarily.
- Location data — if you use the “Use my location” feature, your device's coordinates are geocoded to a city name. We store the city and approximate coordinates to calculate trade matches. We do not track your location continuously.
- Trade data — your have/want card lists, trade proposals, and trade history.
- Usage data — basic server logs (request timestamps, response codes). No analytics or tracking pixels.
2. How We Use Your Data
- Matching you with nearby traders who have cards you want, and want cards you have.
- Sending trade notifications (email and/or push, based on your preferences).
- Displaying your reputation score and trade history to potential trade partners.
- Improving platform reliability and diagnosing technical issues.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. What We Share
Your contact method and LGS affiliation are only revealed to another user after both parties accept a trade. Before that point, only your display name, city, reputation score, and card lists are visible to potential trade partners.
Pricing data is sourced from Scryfall. Currency conversion rates are sourced from Exchange Rate API. No personal data is shared with these services.
4. Data Retention
Your data is retained for as long as your account is active. You may request deletion of your account and associated data by contacting us through the feedback widget in the app. We will process deletion requests within 30 days.
5. Cookies
We use cookies solely for authentication (session management) and currency preference storage. We do not use tracking cookies or third-party advertising cookies.
6. Security
All data is stored in Supabase (hosted on AWS). Communication is encrypted via HTTPS. Authentication uses OAuth 2.0 with PKCE. We do not store passwords.
7. Your Rights
Depending on your jurisdiction (including under PIPEDA for Canadian users), you may have the right to access, correct, or delete your personal data. To exercise these rights, use the feedback widget in the app or contact us directly.
8. Changes
We may update this policy as the platform evolves. The date at the top of this page reflects the most recent revision. Continued use of SwapYard after a policy change constitutes acceptance.
9. California Privacy Rights (CCPA)
California residents have the right to opt out of the sale or sharing of their personal information. SwapYard does not sell personal information. To submit a data request, contact us at privacy@swapyard.app.
Questions? Use the feedback widget in the app.