Privacy Policy

Effective: July 8, 2026

This explains how Empress Ecosystems LLC ("we", "us") handles your information when you play Swapp at swapp.eco. Swapp is a product of Empress Ecosystems LLC, which operates empress.eco. Not a separate company. One company, one policy, spoken here in Swapp's voice.

The short version

Swapp is a behavioral measurement service: it records detailed user interaction data (xAPI statements) as core functionality. The per-interaction, per-moment event stream is the product, not incidental analytics. That measurement is what lets the feed learn what you like. It records what you play and how it goes, not who you are offline. We don't sell your data or show third-party ads.

What we collect

• Gameplay activity. Every card you open, play, score, and progress step, recorded as individual behavioral (xAPI) statements tied to a Swapp player ID. This is deliberate and detailed: it is the core of the service, not background analytics.
• Guests. Guest play is measured too. Without an account, we keep a random, device-scoped player ID in your browser's local storage, and your play is recorded against that ID so history and progress persist on that device.
• Accounts. If you sign up, authentication is handled by Clerk, which processes your email/login. Linking an account merges your guest history into it, so past play follows you across devices.
• Feedback and requests. Feedback you submit and feature requests you make are stored, tied to your player ID.
• Device/log basics. Standard technical data (IP, browser, request logs) processed by our hosting provider for security and reliability.

How we use it

To run and personalize the feed, save progress, merge guest history at sign-up, keep leaderboards honest, keep the service secure, and improve Swapp. We don't sell your data and we don't run third-party advertising.

Who processes it

We use a small set of service providers, each processing data on our behalf:

• Cloudflare. Hosting, CDN, and storage, and live head-to-head games (your account id, handle, moves and IP address while you play live).
• Neon. Database, including the behavioral statement store.
• Clerk. Authentication for accounts.
• Stripe. Payments and creator payouts, when they are on.
• Sentry. Error reports when something on our side breaks.
• Anthropic and OpenAI. Models that help you make and change cards in Studio.
• Fly.io. Hosting for the record store that keeps your play records for Empress.
• Google (Cast). Only when you cast to a TV: Google's casting script sees your IP address and browser.
• Your browser's push service (Google, Mozilla, Apple or Microsoft). Only if you turn on notifications: it delivers them, encrypted so it cannot read them.

A model reads what you send in Help (to sort it and send it to the right person) and what you write when you make or change a card.

Cookies & local storage

Local storage on your device holds your guest player ID, your preferences, and what the app keeps for you on that device: what you play, save and keep as a guest, your recent searches, drafts, your past chats with the assistant, notes waiting to send, and what a card remembers for you. Clerk sets authentication cookies once you sign in. Swapp sets no cookies of its own, and no advertising or cross-site tracking cookies.

Retention

Behavioral records are kept for as long as needed to run the service. They are what powers your history, progress, and the feed. Account data is kept while your account is active. When you delete your account (Settings, Delete account), 30 days later we erase what's tied to you: your profile, email and sign-in, tickets, ratings, certificates, saved cards, messages and settings, and cards you made come down. What stays has no name on it: your play record, under a random id that no longer leads to you, and the payment records the law requires us to keep.

Children

Swapp is for people aged 13 and over. We don't knowingly collect personal information from children under 13; if you believe a child has provided it, contact support@empress.eco and we'll remove it.

Your choices & rights

Play as a guest, or clear your local history in your browser. For anything tied to you, access, export or delete your data by emailing support@empress.eco. Depending on where you live you may have additional rights (such as GDPR or state privacy rights); we honor them.

Security, transfers, law & changes

Data is processed in the United States with encryption in transit. This policy is governed by the laws of the State of New Jersey, USA. We'll post changes here with a new effective date. Questions: support@empress.eco.