Last updated October 1, 2026.
Swaparazzi is a photo-trading game. You take photos of your friends, they take photos of you, and you get the good photo of yourself by trading for it.
This is a private alpha — a test build, shared with a small group of people invited by name. It is not a public product yet. This notice describes what the test build does today.
Swaparazzi is run by Swaparazzi LLC, a Texas company. One person operates it.
Swaparazzi's alpha is for adults. Nothing in the app checks this yet, so it rests on who was invited. Don't use the alpha if you are under 18, and don't put photos of anyone under 18 into it.
Photos. Every photo you add — shot in the app or picked from your camera roll — is uploaded and stored. The app can't be a trading game without them. Before upload, your phone shrinks each photo to 2000 pixels on its longest edge and re-saves it as a JPEG.
Your name, color and Swapple. The display name you pick, the color you pick, and the parts you choose for your character. Your crewmates see all three, which is how anyone knows whose card is whose.
Which crews you're in. Which crews you joined, which table you're seated at, and when you joined. This is what puts you and your friends in the same game.
A token that says this phone is you. When you make or join a crew, the server gives your phone a long random string and your phone keeps it. Every request the app makes sends it, and that is the whole of how the app knows who you are in a crew. It is kept as ordinary text on your phone and in the database. Anyone who got a copy could act as you in that crew, so treat it like a password even though you never see it.
Your email address, if you sign in. Signing in is optional and the app works without it. If you do, you type an email address and get a one-time code. The address is held by Supabase, the company that runs the sign-in system. Swaparazzi's own database is built with no place to put an email address, on purpose. Alongside it is a list of devices signed in to your account, with a coarse label like "iPhone", and a log of sign-ins and any device you revoke. That list is what lets you see and cut off a phone you lost.
What you do in the app. Trades and offers you start, what's on each side of a deal, whether you confirmed. Stars you place on other people's photos. The short chat lines you send, which come from a fixed list rather than free typing. The crew activity feed. Bounties you post, including the line you type describing the shot you want, and the photos people submit for them. Decks you make and what you file into them. Which photos you shared to which crew. Tags saying who is in a photo. Care packages you send, who they went to, and which photos each person kept. Each of these is stored because the feature is built out of it: a trade that isn't recorded isn't a trade.
Roughly what you're up to right now. While the app is open it reports a short status — picking, browsing, looking at a trade — and the time it last heard from you. Your crewmates see this so nobody thinks they're being ignored.
Feedback you send. If you use the in-app feedback box, your message, your display name and the app version are stored.
Error reports. When something in the app throws an error, the app posts the error message and the top few lines of the technical stack to the server, where it goes into the server's log. This is temporary scaffolding for finding bugs on a phone that has no console. It does not send your photos.
What it does not collect. The app never asks for your location, your contacts, or your microphone. It asks for the camera and your photo library, and nothing else. There is no analytics, no ad tracking, and no third-party tracker of any kind in the app.
The photos are pictures of real, identifiable people, and usually not of the person holding the phone. A photo you take of a friend is data about your friend, not just about you.
Photos are stored in a private bucket. They are not on the public internet, and you can't reach one by guessing a link. When the app shows you a photo it asks the server for a temporary link that expires after an hour.
Two ordinary things in the app show a photo to someone in your crew, and both are your choice: sharing a photo to a crew, and tagging someone in it. Tagging a person makes the photo visible to them in the app even if it was never shared to the crew. Trading, winning a bounty, or keeping something out of a care package is how a photo ends up in someone's collection.
Treat anything you put into Swaparazzi as visible to your crew. Don't put a photo of someone into Swaparazzi if they wouldn't want you to.
Supabase stores the database and the photo files, and runs sign-in including the email addresses.
Vercel hosts the server the app talks to. Everything the app sends passes through it, and the server's logs — including the error reports above — land there.
Cloudflare serves the app's artwork: the Swapple character sprites. Your phone requests those files on nearly every screen, so Cloudflare sees that a device is using the app. No photos and no personal data are sent there.
Swaparazzi LLC — in practice one person — can see everything in the database, including photos, through an admin page and through the database dashboard. There is one person running this alpha, and that person can see your data.
Alpha data is deleted when the alpha ends. Until then nothing expires on its own: photos, trades, chats, feed lines and tokens stay in the database while the alpha is running, and leaving a crew does not delete the photos you added or the trades you made.
You can ask for your data to be deleted sooner. See below.
Email hello@swaparazzi.app and say what you want.
Being straight with you about how this works: there is no button. Deletion is not built. It is done by hand in the database, so give it a few days, and ask again if you don't hear back. A self-serve delete is planned but does not exist yet.
If you want a photo of yourself taken out, ask — you don't have to be the person who took it.
The alpha is small, invite-only and unfinished, and this notice matches that. A fuller privacy policy and terms of service come before Swaparazzi is public, and they will replace this.
When this notice changes in a way that matters, you'll be told directly — the same way you were invited. There is no mailing list and no notification system in the app.