Privacy

Who this notice covers

This privacy notice covers the Swoobz pre-launch waitlist at staging.swoobz.com and swoobz.com. It explains what personal information we collect when you sign up for the waitlist, why we collect it, how long we keep it, and how you can ask for it to be removed.

Swoobz is operated by a Belize-incorporated company and is currently in a pre-launch phase. We do not run real-money gambling on this site yet. A separate, fuller privacy notice covering the gambling platform will replace this one before launch.

What we collect

Email address. You give this when you sign up for the waitlist. It is the only required field.

Optional profile fields. If you complete the profile task, we store the display name and avatar URL you give us.

Connected account identifiers. If you choose to connect your X (Twitter) or Discord account through the waitlist, we store the user ID and handle returned by that platform. We do not store your X or Discord password.

Technical information. When you visit the site we automatically receive your IP address, your browser type and version (User-Agent), the page you arrived from (Referer), and the country your IP resolves to. This information is logged by our hosting provider (Vercel) and used by us for security, fraud prevention, and analytics.

Analytics events. We use Google Tag Manager and Google Analytics 4 to count visits and signups. Analytics events fire only after you consent (where required by local law).

Referral data. If you arrive through a referral link, we store the referral code so we can attribute the signup to the person who referred you.

Why we collect it

To run the waitlist. We use your email to confirm your signup, send you the verification link, and notify you when the platform opens.

To award founder rewards. The XP and referral system relies on us being able to count which tasks each waitlist account has completed.

To prevent abuse. IP address, User-Agent, and timing data help us block spam, bots, and duplicate signups.

To improve the site. Aggregated analytics tell us which pages people read and which referral channels work. Individual visitors are not identifiable in our analytics reports.

Legal basis for processing (EU/UK visitors)

Consent. You give consent when you sign up for the waitlist and when you accept the analytics banner.

Legitimate interests. We rely on legitimate interests for fraud prevention, security, and the very minimum technical logging required to keep the site online.

Legal obligation. If we receive a valid legal request, we will retain and disclose the minimum information required to comply.

Who we share with

Hosting and infrastructure. Our website is hosted by Vercel and our database is hosted by Railway. They process your data on our behalf under written contracts.

Email delivery. Resend sends our verification emails. They process your email address only to deliver the message.

Analytics. Google receives aggregated analytics events through Google Tag Manager and Google Analytics 4, where you have consented.

Connected platforms. If you connect X or Discord, those platforms receive a standard OAuth handshake. We do not share your Swoobz data with them.

Law enforcement. We share data only when legally required to do so.

We do not sell your personal information.

How long we keep it

Waitlist data. We keep waitlist signup data for as long as you are on the waitlist plus 90 days after you ask us to remove it, so we can confirm the removal and prevent fraudulent re-signups.

Technical logs. IP address and request logs are kept for 30 days, then deleted.

Analytics. Aggregated analytics events are kept for up to 14 months, in line with Google Analytics 4 defaults.

Your rights

You can ask us to show you the personal information we hold about you, correct it, delete it, or stop processing it. You can also ask for a copy in a portable format.

To make any of these requests, email privacy@swoobz.com. We reply within 30 days.

You also have the right to complain to your local data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

International transfers

Our hosting infrastructure is operated by US-based providers (Vercel, Resend, Google). Where required, we rely on Standard Contractual Clauses approved by the European Commission to cover transfers of personal data from the EU/UK to the US.

Cookies

We use a small number of strictly necessary cookies to keep you signed in to the waitlist and to remember your referral code. These cookies do not need consent.

We use optional analytics cookies to count visits. These only set after you accept the analytics banner.

We do not use cookies for cross-site advertising.

Changes to this notice

When we update this notice, we change the date at the top and post a short summary of the changes here.

Before public launch we will replace this entire notice with the counsel-reviewed version that covers the gambling platform.

Contact

Questions or requests: privacy@swoobz.com.

Security disclosures: see /.well-known/security.txt.