This policy explains what Swatted processes and why. In this build, all searchable records are synthetic — they do not describe real people.
What we process
- Account details: your email address and a securely hashed password.
- Discord identity: your permanent Discord user ID, plus cached username, display name and avatar for display.
- IP addresses: observed during signup, verification, login, search and reveal, for security and abuse prevention.
- Search queries and history: what you searched, the type, time, and result counts.
- Reveal and credit usage: records you reveal and the credits spent.
- Security events: logins, device approvals, sessions and trusted devices.
- Removal requests: details you submit when asking us to remove a record.
How we protect it
- Passwords are hashed with Argon2id and never stored in plain text.
- IP addresses are encrypted at the application layer; a keyed hash allows correlation without exposing the raw value.
- Access to administrative data is restricted and authenticated server-side.
Retention
Raw IP observations are retained for 180 days and then removed, unless a specific security or legal hold applies. Search history is retained for security and abuse prevention and cannot be deleted by users. If you delete your account, personal identifiers are scrubbed, though some security and audit records may be retained for a limited period.
Your choices
- Export your data at any time from your account.
- Delete your account, which unlinks Discord and scrubs personal identifiers.
- Request removal of a record that describes you.
The service may be used by people in Europe; we aim to handle data rights and retention seriously. We do not claim regulatory certification without qualified review.
Contact
Questions about privacy? Contact us.