RankSwap

Privacy

Draft, pending legal review. October 2026

Who we are

RankSwap helps people who work on websites find link trade partners. This page explains what we store about you, why, who processes it for us, how long we keep it and what you can ask us to do with it. Contact: [privacy contact email, to be added].

What we store

  • Account: your email address, first and last name, handle, role, headline, bio and LinkedIn URL.
  • Country of residence, which you declare at sign-up, and when you accepted the terms.
  • Your domains: hostname, niche, topics, metrics (DR, traffic, referring domains, spam score), link types, guidelines and what you want in return.
  • Match recommendations made for your domains.
  • Trade requests and their timeline: the terms you agree, your messages, and the URLs where links were placed.
  • Results of the automatic checks that a placed link is live and followed.
  • Who invited you, if you joined through an invite link.

Why

To run the service you signed up for (contract): show your listings to other members, suggest matches, run trades and check that agreed links stay live. Your country and terms acceptance are kept to meet our legal obligations and to show that the service isn't offered where we don't serve. We don't sell your data or use it for advertising.

Who else sees it

Other members see your name, profile, reputation and your sites' niche and metrics. A domain name is shown to the other member only once a trade involving it is accepted. These processors handle data for us:

  • Supabase: database and sign-in.
  • Vercel: hosting.
  • OpenRouter: AI matching. Domain details (niche, metrics, guidelines, wants), never your name or email, are sent to rank matches and draft first messages.
  • DataForSEO: domain metrics. Only hostnames are sent.
  • Our email provider: sign-in links, notifications and the weekly summary.
  • Umami Analytics: cookie-less usage statistics (pages visited and steps such as listing a site or sending a request). No cookies, no names, emails or hostnames; Umami does not store IP addresses and counts visitors with a hash that changes every month.
  • Cloudflare Turnstile: a bot check on sign-in and the report form. Cloudflare processes your IP address and browser signals to tell people from bots.

How long we keep it

Until you delete your account. When you do, your profile, domains and matches are deleted, open requests are cancelled, and your sign-in details are removed. Completed trades stay in your partners' history as “Deleted member”, without your sites, messages or link URLs, because they are part of the other member's record too. Link check results are kept for up to a year after a trade.

Your rights

You can see and correct your profile in Settings, download all your data as a file (Settings, “Download my data”), and delete your account yourself (Settings, “Delete account”). You can also ask us to restrict or stop processing, or complain to your data protection authority. Write to the contact above for anything you can't do in the app.

See also the terms.