PRIVACY NOTICE · DRAFT FOR OWNER REVIEW

Your home address? Not interested.

SwopSignal is designed to collect as little personal information as possible, subject to a final operator privacy review before public launch.

What we collect

We collect an email address, hashed password, your chosen town and public Checkers branch, sticker lists, in-app messages, payment status, EFT references, hashed bank transaction identifiers, approval audit records and abuse reports. We do not request home addresses, ID numbers or telephone numbers.

Who sees what

Your email and password are not shown to other members. Collectors may see matching sticker numbers, limited area information, and your anonymous handle only after both parties agree to connect. Chats are available only to both accepted members, and may be reviewed by authorised administrators when investigating abuse.

Why we store information

To operate account access, match stickers, show in-app match and message alerts, process payment confirmations and handle safety reports. External payment processors handle card payment details.

In-app notifications

SwopSignal sends no outgoing email while email delivery is switched off. Match and message alerts appear in your account and remain unread until you acknowledge them. Sign in with your email and password.

Email-link sign-in (currently disabled)

We send a single-use sign-in link to the email address you enter. The link expires after 15 minutes and requires confirmation on the website. Pending delivery records are removed within a day after expiry. Successful email verification is recorded for account security; authorised operators may use a recent verified sign-in to confirm payment approvals. Account deletion revokes outstanding sign-in links.

Optional Google sign-in

If you choose Google sign-in, Google verifies your identity and provides your verified email address and a stable account identifier. We use those details only to create or sign in to your SwopSignal account. We do not request access to Gmail, Google Drive or your contacts, and do not store Google access or refresh tokens. Existing password accounts require an explicit Google link from Account. New members must still confirm they are 18+, accept the terms and choose a public branch.

Manual EFT payments

If bank EFT is enabled, the receiving account details are shown only to signed-in members at checkout. You receive a unique payment reference. Reporting a transfer does not activate access: an authorised operator checks the funds received. We do not request uploads of your bank statement or proof of payment, or collect your online banking credentials. Bank transaction identifiers used by the operator are hashed to prevent duplicate credit.

Retention and rights

Members may request access to, correction of, or deletion of their personal information, subject to legal and payment recordkeeping obligations. Use Account to download your account information, change your public branch, turn off alerts or delete your account. Deletion removes associated platform records; bank and payment-provider records remain subject to their own lawful retention requirements. Operator contact, processor and overseas-transfer disclosures, and retention periods must be completed before launch.

Contact

support@oremea.com