Privacy Policy

1. Overview

Swap A Set LLC ("SwapASet," "we," "us," or "our") operates the SwapASet platform at swapaset.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.

By creating an account or using SwapASet, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Information You Provide Directly

Information Collected Automatically

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on the Platform
• Swap activity, listings created, and credits earned/spent
• Email open and click rates (via Mailchimp)

Information from Third Parties

• Stripe: Payment confirmation and billing status (we never store full card numbers)
• Shippo: Shipping label generation and tracking data
• Rebrickable: Set data used to populate listings (no personal data involved)
• Cloudinary: Photo storage metadata

3. How We Use Your Information

We use your information only for the following purposes:

• Creating and managing your account
• Facilitating swap matches between members
• Processing membership payments and shipping label charges
• Sending transactional emails (swap confirmations, credit awards, complaint outcomes)
• Sending marketing emails about SwapASet updates and features (you may opt out at any time)
• Resolving disputes and enforcing our Terms of Service
• Improving the Platform through analytics and usage data
• Complying with legal obligations

We do not use your data for automated decision-making or profiling beyond basic platform functionality.

4. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following limited circumstances:

Service Providers

We share data with trusted third-party service providers who help us operate the Platform:

• Stripe — payment processing
• Shippo — shipping label generation and tracking
• Firebase (Google) — database, authentication, and hosting
• Cloudinary — photo storage
• Mailchimp (Intuit) — email marketing
• Rebrickable — set data lookup

All service providers are contractually required to protect your data and use it only for the services they provide to us.

Between Members

When you participate in a confirmed swap, your first name and shipping address are shared with the other member for the purpose of completing the exchange. We do not share your email address, phone number, or payment information with other members.

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, safety, or property of SwapASet, our members, or the public.

Business Transfers

If SwapASet is acquired, merged, or sold, your information may be transferred to the acquiring entity. We will notify you via email before your data is transferred and subject to a different privacy policy.

5. Cookies & Tracking

SwapASet uses cookies and similar tracking technologies to:

• Keep you logged into your account
• Remember your preferences
• Understand how members use the Platform (analytics)
• Measure the effectiveness of our email campaigns

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Platform, including staying logged in.

We do not use third-party advertising cookies or sell cookie data to advertisers.

6. Children's Privacy (COPPA)

SwapASet is intended for use by adults aged 18 and older. We do not knowingly collect personal information from children under the age of 13.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we become aware that a child under 13 has provided us with personal information without verified parental consent, we will immediately delete that information and terminate the associated account.

If you believe a child under 13 has created an account on SwapASet, please contact us immediately at hello@swapaset.com.

While SwapASet is designed for families with children, all accounts must be created and managed by an adult parent or guardian. The adult account holder is responsible for all activity on their account.

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

• HTTPS encryption for all data transmitted to and from the Platform
• Secure authentication through Firebase
• Payment data handled exclusively by Stripe — we never store credit card numbers
• Access controls limiting which SwapASet personnel can access member data

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Active accounts: Data retained for the duration of your membership
• Cancelled accounts: Basic account data retained for 12 months after cancellation for dispute resolution purposes, then deleted
• Terminated accounts: Data retained for 24 months for legal and fraud prevention purposes
• Swap records: Transaction history retained for 3 years for dispute and legal purposes
• Email list: Retained until you unsubscribe

You may request deletion of your data at any time by contacting hello@swapaset.com. Some data may be retained beyond your request if required by law or for legitimate business purposes such as fraud prevention.

9. Your Rights & Choices

You have the following rights with respect to your personal information:

To exercise any of these rights, contact us at hello@swapaset.com. We will respond to all requests within 30 days.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, share, and sell
• The right to delete personal information we have collected about you
• The right to opt out of the sale of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To submit a California privacy rights request, contact us at hello@swapaset.com with the subject line "California Privacy Request."

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by sending an email to the address associated with your account at least 30 days before the changes take effect.

Your continued use of the Platform after changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised policy, you may cancel your account before the changes take effect.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: hello@swapaset.com
• Business: Swap A Set LLC
• State of Formation: Minnesota

We take privacy seriously and will respond to all inquiries within 30 days.