SecretSwap

SecretSwap is designed with anonymity as its core principle. We do not collect or store any personally identifiable information (PII) about our users. This includes:

• Your name, email address, or phone number
• Your IP address or device identifiers
• Your location data or browsing history
• Any other information that could identify you personally

When you submit a secret, we only collect the content of your message and the emotion you select. This information is completely disconnected from any user identifiers.

Your secrets are treated with the utmost confidentiality:

• Anonymity: Secrets are never linked to your identity or any identifying information
• Encryption: All secrets are encrypted during transmission and storage
• Moderation: We use AI-powered moderation to filter inappropriate content without human review
• Data Minimization: We only store the minimum necessary information to provide our service

When a secret is revealed publicly, it remains completely anonymous with no connection to the original submitter.

SecretSwap does not use any tracking cookies, analytics tools, or advertising networks. We do not:

• Place cookies on your device
• Use tracking pixels or web beacons
• Employ fingerprinting techniques
• Share data with third-party advertisers

The only data stored locally is your preference for dark/light mode if you change it, which is stored only on your device.

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256
• Access Control: Strict access controls limit who can view stored secrets
• Regular Audits: We conduct regular security audits and vulnerability testing
• Data Retention: Secrets that haven't been revealed are automatically deleted after 90 days

Despite these measures, no online service is 100% secure. We continuously work to improve our security practices.

We use a limited number of third-party services to operate SecretSwap:

• Hosting Provider: Our servers are hosted with a privacy-focused provider
• Moderation API: We use TensorFlow.js for content moderation (runs locally in your browser)
• Font Library: We use Font Awesome for icons (loaded from CDN)

These services do not receive any user content or personal information. We carefully select providers with strong privacy policies.

SecretSwap is not intended for children under the age of 13:

• We do not knowingly collect information from children under 13
• Our content moderation system filters inappropriate content for minors
• If we learn that a child under 13 has provided us with personal information, we will delete it immediately

Parents or guardians who believe their child may have used our service can contact us for support.