Privacy Policy

Last updated: 4 September 2026

1. Data we process

Depending on your use, we may process:

• email address, authentication and account identifiers;
• profile information you choose to provide;
• collection inventory, missing items, duplicates and statistics;
• trade offers, counteroffers, status and ratings;
• messages sent through the service;
• delivery or handover details for a specific trade;
• reports, blocked users and safety records;
• uploaded images where a feature allows them;
• device and notification identifiers, including FCM tokens;
• technical and security data required to operate the service;
• crash reports and diagnostic data used to detect failures and improve app stability, as described below.

2. Purposes

We use data to create and secure accounts, provide collection, messaging and trade features, send requested notifications, prevent abuse, investigate reports, answer support requests, detect crashes and diagnose technical issues, maintain the service and comply with legal obligations.

3. Legal bases

Processing may rely on performance of the service contract, consent where required, legal obligations, and legitimate interests such as security, fraud prevention, support, and maintaining a stable, reliable application (including crash diagnostics).

4. Visibility and sharing

Public profile and collection information is visible according to service settings. Messages and private handover details are intended only for the relevant trade participants and authorised administrators where access is needed for support, safety or legal compliance.

We do not sell personal data. SwapStash currently relies on Google Firebase, including Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Hosting and Crashlytics.

5. Crash reporting and diagnostics

The SwapStash app uses Google Firebase Crashlytics to detect crashes, perform technical diagnostics, improve application stability and help fix defects.

Crashlytics may receive crash stack traces, relevant application state, relevant device metadata, a Crashlytics installation UUID, Firebase installation-related identifiers, and developer-defined diagnostic logs or custom keys. When you are signed in, SwapStash may set your Firebase Authentication user ID as the Crashlytics user identifier so related reports can be investigated.

SwapStash does not intentionally send email addresses, display names, phone numbers, postal addresses, delivery or handover details, message text, item notes, free-text content, full Firestore documents, or trade IDs to Crashlytics.

Firebase currently states that Crashlytics crash stack traces, extracted crash data and related identifiers are retained for about 90 days before deletion from live and backup systems begins. Website Google Analytics 4 is separate and is described under website cookies below. Firebase Analytics is not used in the SwapStash app at this time.

6. International processing

Service providers may process data outside Slovenia or the EEA. Where required, appropriate safeguards are used.

7. Retention

Data is generally retained while an account is active and as needed to provide the service. After deletion, limited data may remain where reasonably necessary for security, dispute handling, legal obligations or protection against abuse.

8. Children and teenagers

SwapStash is not intended for children under 13. Users who cannot consent under applicable local law need permission from a parent or legal guardian.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability. You may withdraw consent where applicable and complain to the competent data-protection authority.

10. Account deletion

See the account deletion page.

11. Website cookies

This public website does not use advertising cookies. With your consent, it uses Google Analytics 4 to measure visits, page use, clicks that open the app, contact-form submissions and PWA installations. Analytics remains disabled until you accept it, and you can change your choice through Privacy settings. Firebase Hosting also processes basic technical request data needed to deliver and protect the website.

12. Changes

We may update this policy as the service or legal requirements change. The current version and date will remain on this page.

13. Contact