Privacy Statement

TestSwap (testswap.dev) is run by Dizid Web Development ("we", "us"). This statement explains what data we collect, who can see it, and what you can do about it. Short version: we collect only what is needed to run the service. There are no analytics, no ads and no tracking cookies, and we never sell your data.

1. What we collect

• From your X account, when you sign in: your X user ID, handle, display name and profile picture link. Sign-in is handled by Google Firebase Authentication. We never see your X password. We don't post to X for you, and we don't read your messages, timeline or followers.
• Apps you list: name, URL, pitch, testing task, platform, version, status and any test credentials or access notes you add.
• Reviews: the two public review fields, optional private bug notes and the maker's rating.
• Credits: your balance, which changes as reviews are written and rated.
• Technical data: our hosting provider processes your IP address, browser details and request logs to deliver the site and keep it secure.

2. Who can see what

• Anyone: your X handle, display name and avatar, the apps you list (except credentials), the public fields of your reviews, and review counts. Anyone can also see whether your apps are accepting reviews, which shows whether your credit balance is above zero.
• Signed-in users: test credentials and access notes on apps. Don't put real passwords or personal data there.
• Only you and the app's maker: private bug notes and the rating on a review.
• Only you: your exact credit balance.

3. How we use it

We use your data only to run TestSwap: signing you in, showing apps and reviews, keeping track of credits, and preventing abuse such as self-reviews or duplicate reviews. We don't use it for advertising or profiling, and we don't sell or rent it to anyone.

4. Service providers

We rely on these providers to run TestSwap. Each processes data only to provide its part of the service:

• Google Firebase: sign-in and account records.
• Netlify: website hosting and server functions.
• Neon: our database, hosted on Amazon Web Services.
• X: sign-in. Profile pictures load directly from X's servers.
• Google Fonts: web fonts, which load from Google's servers.

Your data is stored and processed in the United States. Where the law requires it, these providers protect transfers with safeguards such as the EU Standard Contractual Clauses.

5. Cookies and local storage

Firebase stores your sign-in session in your browser's local storage so you stay signed in. That's strictly necessary for the service to work. We don't use analytics, advertising or tracking cookies, which is why there is no cookie banner.

6. How long we keep it

We keep your data for as long as your account exists. When you ask us to delete your account, we remove your profile, the apps you listed and the reviews you wrote within 30 days, and we delete your Firebase sign-in record. Our providers may keep server logs for a short period under their own retention policies.

7. Your rights

You can ask us for a copy of your data, or ask us to correct or delete it. If you are in the EU, EEA or UK, you also have the right to object to or restrict processing and to complain to your local data protection authority. Our legal bases are providing the service you signed up for (contract) and keeping it safe from abuse (legitimate interests).

8. Children

TestSwap is not meant for anyone under 16. If you are under 16, please don't use it.

9. Changes

If we change this statement, we will update the date at the top and announce significant changes on the site or on X. Also see our Terms of Service.

10. Contact

To use any of the rights above or ask a question, send a DM to @testswapdev on X.