Privacy Policy

We collect as little as we can and never sell it. This page explains what we keep, why, for how long, and what you can ask us to do with it.

Who is responsible

Spawnswap is run by Ahmet Toz in United States, who is responsible for your data (the "data controller"). You can reach us at tozahmet0912@gmail.com.

What we collect

• Account: your email, a display name and your password (stored only as a secure hash).
• Roblox account: your Roblox username, user id and the date the Roblox account was created, once you link them. We read your public profile only to check the link code and to stop brand-new alt accounts from collecting invite bonuses.
• Games: public info from Roblox about games you add (name, icon, player counts) and the trailer you give.
• Trailer videos: if you upload a video, it is stored with our file storage provider and shown publicly on Spawnswap.
• Playtime: if a game has the playtime check script, it reports once a minute only the players who chose that game on Spawnswap and are still in it. Other players in the server are never sent to us. For games without it, we check your public Roblox online status (whether you are in a game) about once a minute while you have a game going on Spawnswap. We only use this to count playtime for games you started on Spawnswap.
• Comments, likes and leaderboards: comments you post and the games and comments you like. Your Roblox username (or display name if you haven't linked Roblox) is shown publicly next to your comments and on the leaderboards.
• Invites: if you joined with someone's invite link, we store who invited you so we can give both of you the bonus.
• Reviews: the rating and text you write. The game's developer sees them with your Roblox username.
• Payments: Stripe handles card details. We never see your card number, only the amount and whether it was paid.
• Visits: when you open a game from our homepage we store a one-way hash of your IP address and browser, reset daily, to count unique visits. We don't store the IP address itself.
• Security: to stop password guessing and spam we briefly log attempts to log in or sign up, keyed by IP address or email. These records are deleted after about a day.

Why we use it

• To run your account and the credit swap you signed up for (needed to provide the service).
• To prevent cheating, fake plays and abuse (our legitimate interest in a fair service).
• To take payments and keep tax and accounting records (legal obligation).

We don't use your data for advertising, and we don't sell or rent it to anyone.

Cookies

We use one cookie, bb_session, which keeps you logged in. It is strictly necessary, so we don't ask for consent. We use no advertising, analytics or tracking cookies. Trailers play through YouTube's privacy-enhanced mode (youtube-nocookie.com); YouTube may store data in your browser once you press play. The checkout page is run by Stripe, which uses its own cookies to prevent fraud.

Who we share it with

• Stripe, to take payments.
• Our hosting, database and file storage providers (Vercel and Neon), to run the site.
• Roblox, only in the sense that we ask Roblox's public APIs about the user ids and games on Spawnswap.
• Nobody else, unless the law requires it.

These providers may store data outside your country (for example in the United States or the EU). We only use providers that protect it with standard contractual safeguards.

How long we keep it

• Account, games, reviews and comments: until you delete your account.
• Payment records: as long as tax law requires (usually up to 10 years), even after the account is gone.
• Visit hashes and security logs: a few days at most.

Children

Spawnswap is for people aged 13 and over. We don't knowingly collect data from children under 13. If you believe a child under 13 has made an account, tell us and we'll delete it.

Your rights

You can ask us to show you a copy of your data, correct it, delete it, or stop using it, and to send it to you in a common format. Write to us and we'll answer within 30 days. You can delete your account yourself under My games > Account settings. Deleting your account removes your account, games, comments and reviews (payment records we must keep by law stay). If you think we handled your data wrongly, you can also complain to the data protection authority in your country.

Changes

If we change this policy in a way that matters, we'll say so on the site before it takes effect.

Spawnswap is run by Ahmet Toz, United States. Questions: tozahmet0912@gmail.com