Privacy Policy

Effective: July 8, 2026

This explains how Empress Ecosystems LLC ("we", "us") handles your information when you play Swapp at swapp.eco. Swapp is a product of Empress Ecosystems LLC, which operates empress.eco — not a separate company. One company, one policy, spoken here in Swapp's voice.

The short version

Swapp is a behavioral measurement service: it records detailed user interaction data (xAPI statements) as core functionality — the per-interaction, per-moment event stream is the product, not incidental analytics. That measurement is what lets the feed learn what you like. It records what you play and how it goes, not who you are offline. We don't sell your data or show third-party ads.

What we collect

• Gameplay activity — every card you open, play, score, and progress step, recorded as individual behavioral (xAPI) statements tied to a Swapp player ID. This is deliberate and detailed: it is the core of the service, not background analytics.
• Guests — guest play is measured too. Without an account, we keep a random, device-scoped player ID in your browser's local storage, and your play is recorded against that ID so history and progress persist on that device.
• Accounts — if you sign up, authentication is handled by Clerk, which processes your email/login. Linking an account merges your guest history into it, so past play follows you across devices.
• Feedback and requests — feedback you submit and feature requests you make are stored, tied to your player ID.
• Device/log basics — standard technical data (IP, browser, request logs) processed by our hosting provider for security and reliability.

How we use it

To run and personalize the feed, save progress, merge guest history at sign-up, keep leaderboards honest, keep the service secure, and improve Swapp. We don't sell your data and we don't run third-party advertising.

Who processes it

We use a small set of service providers, each processing data on our behalf:

• Cloudflare — hosting, CDN, and storage.
• Neon — database, including the behavioral statement store.
• Clerk — authentication for accounts.
• Resend — email delivery, where we send you email or notifications.

Cookies & local storage

Only what's needed to work: local storage for your device-scoped guest player ID and preferences, and — if you sign in — authentication cookies set by Clerk. No advertising or cross-site tracking cookies.

Retention

Behavioral records are kept for as long as needed to run the service — they are what powers your history, progress, and the feed. Account data is kept while your account is active. If you ask us to delete your data, we remove or de-identify what's tied to you, keeping only what the law requires us to keep.

Children

Swapp is for people aged 13 and over. We don't knowingly collect personal information from children under 13; if you believe a child has provided it, contact [email protected] and we'll remove it.

Your choices & rights

Play as a guest, clear your local history in your browser, and — for anything tied to you — access, export, or delete your data by emailing [email protected]. Depending on where you live you may have additional rights (such as GDPR or state privacy rights); we honor them.

Security, transfers, law & changes

Data is processed in the United States with encryption in transit. This policy is governed by the laws of the State of New Jersey, USA. We'll post changes here with a new effective date. Questions: [email protected].