Version 1 — effective 29 August 2026.
SwapBins (“we”, “us”) operates the website at www.swapbins.com. This policy explains what personal data we collect, how we use it, and your choices. We handle personal data in line with Singapore’s Personal Data Protection Act (PDPA).
Account details you provide (name, email, password, and optional profile information such as bio, avatar, gender and date of birth); the listings, addresses and wanted-items you create; messages you send through the platform; and standard technical data such as log records, device and browser information, session cookies needed to keep you signed in, analytics cookies, and — if you enable push notifications — a device messaging token. See “Analytics, cookies and push notifications” below.
To create and run your account, show your listings to other members, enable safe on-platform communication and swaps, verify eligibility (including the minimum age), keep the platform secure, prevent abuse and enforce our terms and item policy, and improve the service. We do not sell personal data.
Your display name, avatar, join date, and the content of your published listings (photos, description, general pickup area) are visible to other members and to the public. Your email address and exact addresses are not shown to other members.
We share data with service providers that host our infrastructure, send our email, process uploads, provide analytics, and deliver push notifications, only as needed to run SwapBins. We may disclose data if required by law, to respond to a lawful request, or to protect the rights, safety or property of SwapBins or its members.
We use strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery. We also use Google Analytics to understand how the site is used (pages viewed, approximate location, device and browser type); it sets its own cookies and processes data on Google’s infrastructure, with IP addresses handled in truncated form. This helps us improve the service and is not used to identify you personally or to advertise to you.
If you turn on push notifications from your profile, we use Google’s Firebase Cloud Messaging to deliver them and store a device token linked to your account so we can send alerts about your conversations. You can turn notifications off at any time in your profile or in your browser or device settings, which removes the token. Most browsers also let you block or clear cookies through their settings.
We keep account data for as long as your account is active and for a reasonable period afterwards to meet legal, security and dispute-resolution needs, then delete or anonymise it.
Passwords are stored hashed, connections are encrypted in transit, and access to personal data is limited. No system is completely secure, so we cannot guarantee absolute security.
You can view and update most of your information in your profile settings. To request access to, correction of, or deletion of your personal data, or to withdraw consent, email us at the address below. Some data may be retained where the law allows or requires it.
We may update this policy at any time without prior notice. The current version is always the one published on this page. Your continued use of SwapBins after a change means you accept the updated policy.
Questions about privacy, or to make a data request: hello@swapbins.com.