Privacy Policy

We collect information needed to operate SwipeTrove and provide account features:

• Account identifiers such as email address, display name, avatar URL, and internal user ID.
• Creative references, source links, collections, research-activity records, preferences, and subscription status associated with your account.
• Waitlist email address, signup source, confirmation status, and optional product-update consent.
• Public source URLs or IDs submitted to the authenticated reference-import utility and technical information needed to process them.
• Device, browser, IP address, request logs, and security events used for reliability and abuse prevention.
• Messages submitted through the contact form.

Authentication is operated by SwipeTrove using one-way password hashes, short-lived access tokens, rotating refresh tokens, and secure HTTP-only cookies. Plaintext passwords and refresh tokens are not stored.

You are responsible for keeping your account and sign-in methods secure. You may request account deletion through the contact page.

Public source URLs submitted by signed-in users may be processed to identify reference media made available by the source. Media may pass temporarily through our servers or short-lived operational caches, but SwipeTrove does not intentionally maintain a permanent media copy solely because a source was inspected.

Accounts may retain creative references, collections, notes, tags, favorites, research activity, analytics derived from workspace use, and export requests. This data can include advertiser name, source URL, thumbnail URL, platform, media type, timestamps, and user-entered research. Deleting an item removes it from the relevant workspace feature, subject to operational backups and legal retention requirements.

We use strictly necessary cookies for internal authentication sessions, CSRF protection, security, and account continuity. Local storage may remember theme and result-layout preferences. Analytics and advertising partners may use cookies or similar technologies where permitted by law and your browser settings.

Non-essential analytics and advertising are disabled unless the operator explicitly configures them. If enabled, the policy and any legally required consent controls must be updated before those tools run.

SwipeTrove currently uses local preferences only for theme and result layout. Strictly necessary authentication and security cookies cannot be disabled while using an account.

We rely on service providers that process data on our behalf or as independent controllers where applicable:

• Hostinger for VPS infrastructure hosting, including the private PostgreSQL database operated by SwipeTrove.
• Resend, when configured, for password reset, waitlist confirmation, and consented product-update email.
• Infrastructure and security providers required to deliver and protect the website.
• A payment provider may be added before paid plans launch. This policy will identify that provider and its role before live payment data is collected.

Paid checkout is not active. Before launch, SwipeTrove will disclose the selected payment provider, its privacy terms, whether it acts as a processor or Merchant of Record, and the subscription identifiers shared with SwipeTrove. SwipeTrove does not intend to store full payment-card details.

• Profiles and subscription records are retained while an account remains active and as required for legal, fraud, or accounting purposes.
• Creative references and collections remain until you delete them or your account.
• Free accounts can view seven days of reference-import activity; older records may remain available for service integrity or future entitled access until deleted or the account is removed.
• Confirmed waitlist records are retained through the Pro launch period or until you withdraw. Unconfirmed records may be deleted periodically.
• Contact messages are generally retained for up to 12 months after resolution.
• Security and request logs are retained only as long as reasonably necessary for operations, abuse prevention, and legal obligations.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data. You may also withdraw consent where processing relies on consent and complain to a supervisory authority.

California residents may request disclosure, correction, or deletion of personal information and may have rights concerning sale or sharing. SwipeTrove does not sell personal information for money. We will not discriminate against users for exercising applicable privacy rights.

Submit a verified request through the privacy request form.

We use HTTPS, access controls, row-level security, rate limiting, secure session management, and restricted service credentials. No online service can guarantee absolute security. Providers may process data in countries outside your residence using safeguards available under applicable law.

Questions or privacy requests can be sent through our contact form. The verified operator identity and location must be added before public launch.