Privacy policy

Effective October 18, 2026 · Swapotamus referral pilot

What we collect

Account name, email, sign-in identifiers from Google, GitHub, or Apple, website registration information, ownership verification records, partner preferences, and moderation reports. Authentication uses a secure first-party session cookie. Your selected provider supplies identity information under its own policies.

Referral analytics

The widget does not set visitor cookies, fingerprint browsers, or persist full visitor IP addresses. It requests relevant recommendations and uses signed short-lived receipts to submit clicks. Visible impressions are sampled at 5% and daily totals are estimated by multiplying sampled counts by 20. Bot activity and blocked requests can affect accuracy. A source click does not confirm a destination session or conversion.

Connected assistants

Connecting ChatGPT or another MCP client uses OAuth permissions you approve. We store client registrations, consent records, signing keys and token records in Cloudflare D1. Connected clients can receive your account name and email, owned website details, DNS verification instructions, matching results and widget settings. With write permission, they can register pending websites and request DNS verification when it is enabled. The information returned to a connected client is handled under that client's policies. We do not need your ChatGPT password. Disconnect clients in Settings to revoke their access. Consent remains until disconnected or the account is deleted; expired token records are removed daily.

Retention and controls

Event deduplication receipts are retained for up to seven days; daily aggregates for 180 days; verification diagnostics for 90 days. Expired sessions and rate-limit counters are removed daily. Moderation audit records are retained for operational accountability. Account deletion removes account data, websites, and associated event data; anonymized moderation records can remain. Provider backups follow Cloudflare retention. We do not sell personal data.

Pilot applications

If you apply to join the pilot, we store your email, website homepage, website topic, and category if provided so we can review fit and contact you about the pilot. Applying does not subscribe you to a newsletter. Pending, declined, and revoked requests are removed after 90 days without a review update. Approved requests remain while they grant account access and are removed when that account is deleted. Administrators keep a decision audit record without your application details. Contact support to withdraw a request or correct its details.

External websites and optional media

Following a recommendation visits an independent website. Optional partner logos may be loaded from the logo host without a referrer. Destination websites have their own privacy policies. You can hide logos in widget settings. Standard UTM parameters identify the source website without identifying an individual visitor.

Access and deletion

Manage your information, revoke sessions, or delete your account in Settings. For reports, use the in-app Report website action.