Privacy Policy

Effective October 19, 2026

This policy covers the Swamproots website (swamproots.io) and the Swamproots mobile app (including TestFlight builds), together “Swamproots”. Swamproots is operated from the United States. We collect only what we need to run badges, check-ins, connections and orders. We don't sell your personal information, and we don't use it for third-party advertising.

What we collect

Account and sign-in: your email address (if you sign in with an email code, join the waitlist or order), and the account identifier Apple or Google gives us when you use Sign in with Apple or Google (plus the email they share, which may be an Apple private-relay address). For email sign-in we store only a keyed hash of each one-time code.
Wallet: your public wallet address, if you link a wallet. We use it to check NFT ownership for Holder Edition features. We never ask for or store private keys or seed phrases.
Profile: your display name or handle, your X (Twitter) handle if you add it, the NFT you choose to show (collection, token and image), and an optional link that opens when someone taps your badge.
Connections and badge taps: who you connected with (when you tap badges) and when, and for which event. When someone without the app taps your badge we log only the badge, the time and whether the tag's signature checked out: no IP address, device or identity of the person tapping.
Attendance: which events you checked in to, when, and how (NFC tag, event QR code or location). For location check-ins your phone sends one location reading; we store only that you were inside the venue area and your distance from it, not your coordinates. The app never tracks your location in the background.
Points: the points you earn for verified badge taps. Points have no cash value and can't be sold, transferred or redeemed for money.
Reports: if you report another member, we store the report (reason, optional note, who it was about) so we can review it.
Orders (website): the products you order, your shipping address and email, and payment status. Card details go directly to Stripe; we never see or store them.
Security and abuse prevention: a keyed hash of your IP address when you request an email code (for rate limiting), and standard server logs kept by our hosting provider.

How we use it

To sign you in, show your profile and stamps, record check-ins, connections and points, verify NFT ownership for Holder Edition items, fulfil and support orders, prevent abuse and spam, review reports, and email you about your account or orders (or about preorders, if you joined the waitlist). We don't use third-party analytics or advertising trackers in the website or the app.

Who processes it for us

Supabase: database hosting (United States).
Vercel: website and API hosting.
Privy (Glyph wallet connect): linking and verifying a wallet.
Alchemy: reading public blockchain data to check NFT ownership and fetch NFT images.
Resend: sending sign-in codes and account emails.
Stripe: payments for website orders.
Apple and Google: only when you choose to sign in with them.

These providers process data on our behalf under their own privacy and security terms. Your public profile (handle, X handle, NFT, stamps) is visible to anyone with its link; your email, wallet address and sign-in identifiers are never shown publicly. We may disclose information if required by law. NFT images load directly from Alchemy's CDN, so your browser or the app connects to Alchemy (which sees your IP address) to show them.

Deleting your account

You can delete your account in the app (Profile → Delete account). That removes your sign-in identities (Apple, Google, email and wallet links), your connections, attendance, badge-tap history and your points. If you bought something on the website, the order and the public profile tied to it are kept for tax and fulfilment records, but the app identity on it is erased. You can also ask us to delete your data by emailing crypticdesign.eth@gmail.com; we'll respond within 30 days.

Retention

We keep account data while your account exists. Email sign-in codes are deleted within a day, sign-in nonces within a day, and waitlist entries until preorders open and you've been notified (or you ask us to remove you). Order records are kept as long as tax law requires.

Children

Swamproots isn't directed to children under 13, and we don't knowingly collect their information.

Your choices and rights

You can see and edit your profile in the app, unlink your wallet, and delete your account at any time. Depending on where you live (for example California), you may have rights to access, correct or delete your information; email us and we'll help.

Changes

If we change this policy we'll update the date above, and tell you in the app for significant changes.

Contact

Questions or requests: crypticdesign.eth@gmail.com.