Privacy Policy

Effective 2026-11-04

Swapsona (swapsona.com) is run by a sole proprietor in Oregon, USA. This explains what we collect, why, and what you can do about it. Questions: [email protected].

The short version

• Your photos are used only to make your pictures. We don't sell or share your photos or pictures, and we don't use them as training data.
• They're processed only on our own computers in Oregon.
• You can delete them any time. They're removed from our systems right away and are never kept in backups.
• We don't show ads or use trackers. We count visits ourselves, with no cookies and no outside services (see "Visit counts" below). The site's few cookies keep you signed in, remember your light or dark choice and that you've been here before, and tell your browsers apart for the free credits for sharing (see "Shared pictures").
• A picture is shared only when you share it yourself.

What we collect

• Account: username, email address, and your password (stored only as a one-way hash).
• Photos you upload. Before anything else, we re-save each photo, which removes its hidden information, such as the location, camera details, and date.
• Pictures we make for you, and the choices you made for them.
• Face measurements: see the next section.
• Credits and purchases: what you bought and when. Card and payment details go to Stripe, never to us.
• Technical: your IP address and browser, to keep the site secure (rate limits, abuse) and in logs kept up to 6 months.

Visit counts

When you open a page, we add one to a count for that day: which page it was, which site sent you (if any), your country (from Cloudflare), and whether you're on a phone or a computer. To count how many different people visited, we mix your IP address and browser with a random key that changes every day and is then thrown away, and keep only the result. Nothing in these counts identifies you, visits can't be connected from one day to the next, and the counts aren't shared with anyone.

Face measurements

To check that a picture still looks like you, we measure a few proportions of your face in your photo and in each result. These are the distances between your eyes, mouth, and chin, and the width of your face. We compare those numbers, and results that are too far off don't count.

• We never use them to recognize or identify anyone.
• We never sell, share, or disclose them.
• We keep them only with the photo they came from, and delete them when you delete that photo or your account, or within 3 years of your last visit, whichever comes first.
• We ask for your agreement to this when you create your account.

Your first look

When you upload a photo before you've made any pictures, we may make one quick picture from it right away and show it to you blurred. Only the blurred copy is kept, and it's deleted when you start a picture, when you delete the photo, or after 7 days. A photo from a visit that never became an account is deleted after 2 days either way.

Shared pictures

When you share a picture, it gets its own link. Anyone with that link can see that picture (with the small swapsona.com mark, unless you turned it off) until you delete the picture or your account. We ask search engines not to list these links.

To keep the free credits for sharing fair, we keep scrambled codes made from the networks, browsers, and devices you use with your account, so opening your own link doesn't count. These codes can't be turned back into your address or device, and they're deleted with your account. When someone opens a shared link, their browser is checked the same way, and nothing about it is kept.

How we use your information

We use it to run Swapsona. That means making your pictures, keeping your account, taking payments, and sending emails about your account and your pictures (never marketing). We also use it to keep the site safe, with automatic checks for nudity and for people who may be under 18 and a human review of photos those checks flag, and to meet legal obligations.

Who else is involved

• Cloudflare carries traffic to the site and protects it from attacks.
• Stripe takes payments; its own privacy policy applies to what you give it at checkout.
• Google (Gmail) sends our emails.

We don't give your photos or pictures to any of them, and we give your information to authorities only where the law requires it.

How long we keep things

• Photos and pictures: until you delete them or your account. Photos from a visit that never became an account are deleted after 2 days.
• Account records and purchase history: while your account is open, then as long as tax and accounting law requires. Our database backups keep account records for a limited time; your photos and pictures are never in backups.

Your choices and rights

You can see, download, and delete your photos and pictures, change your details, and delete your account from your profile. You can also write to us to ask for a copy of your information, a correction, or deletion.

• EU, UK, and similar laws: we process your information to provide the service you asked for (contract), to keep it safe (legitimate interests), and where the law requires it. You can object, ask us to restrict processing, or complain to your data protection authority.
• US state laws give similar rights (California, for example). We don't sell or "share" personal information as those laws define it.

Children

Swapsona is only for adults. We don't knowingly collect information about anyone under 18. If you believe we have, write to us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll tell you by email or on the site first.