Home

Privacy policy

This is starter text for development and launch planning. You should have a qualified solicitor review and replace it for your jurisdiction (for example UK GDPR / UK GDPR-style rights).

Who we are

ShelfSwap operates this website and related services. Contact details are on the Contact page.

What we process

  • Account data: such as email address and display name, authentication identifiers, and profile fields you choose to provide.
  • Listings: titles, descriptions, photos, optional ISBN or catalogue links, and listing settings (for example unlock credits).
  • Messages: content you send in listing-related conversations after unlock.
  • Approximate location: coarse location or area text used to show approximate distance — not your precise street address unless you choose to share that in a message.
  • Payments metadata: when you buy credit packs, our payment provider (Stripe) processes card data. We do not store your full card number on our servers.
  • Technical data: logs, diagnostics, and security data as needed to run and protect the service.

Why we process it

To provide the service, authenticate users, prevent abuse, comply with law, and improve reliability.

Processors

We use infrastructure and service providers such as hosting (for example Vercel), database and auth (for example Supabase), and payments (Stripe). They process data under their terms and as our processors where applicable.

Retention

We keep information while your account is active and for a reasonable period afterwards for backups, disputes, and legal obligations. Exact periods may evolve as the product matures.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. Contact us via the Contact page to make a request. You may also complain to your local supervisory authority where applicable.

Cookies and similar technologies

We use technologies needed for sign-in and core functionality. If we add analytics or marketing cookies, we will update this policy and any consent UI accordingly.

Children

The service is not directed at children under the age required by law in your country.

Changes

We may update this policy from time to time. Check this page for the latest version.