Legal

Privacy Policy

Last updated on 17 May 2026

This Privacy Policy explains how MindSwap collects, uses, and protects Personal Data when you use our services or visit mindswap.io.

Non-essential analytics, functional, and marketing cookies or similar browser storage are disabled unless you explicitly opt in through the cookie preferences panel. If you do not agree to this Privacy Policy, please do not use the Service.

1. Definitions

1.1 "Cookies" means data files placed on your device, and similar browser storage such as localStorage or sessionStorage, that can be used for authentication, session identification, preferences, analytics, or similar purposes. To learn more or disable cookies, visit https://www.allaboutcookies.org.
1.2 "MindSwap" refers to the set of related web pages and services located under the mindswap.io domain.
1.3 "Google" refers to Google LLC.
1.4 "Log Files" are records of activity on MindSwap and may include IP address, browser type, ISP, referring/exit pages, and date/time stamps.
1.5 "Personal Data" includes information that can identify an individual and data such as Cookies, Log Files, Tags, and Pixels.
1.6 "Tags" and "Pixels" are electronic files that may be used to understand how you browse MindSwap only after the relevant consent category is enabled.

2. General

2.1 This Privacy Policy applies to Personal Data we collect when you use our services or visit MindSwap.
2.2 Personal Data is processed under Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act dated 10 May 2018.
2.3 We are committed to the following privacy principles:
  • We secure Personal Data and collect it only for the purposes described in this Privacy Policy.
  • We do not rent or sell your Personal Data to third parties.
  • We follow GDPR-aligned Personal Data protection standards effective from 25 May 2018.
  • We provide ways to contact us about questions or requests related to this Privacy Policy.
2.4 By using MindSwap you confirm your agreement with this Privacy Policy. If you do not agree, do not visit MindSwap or use our services.

3. Personal Data We Collect

3.1 If you use our services, you may provide an email address to receive notifications.
3.2 When you visit MindSwap, we collect information needed to provide and secure the Service. Optional analytics, functional, and marketing data is collected only after you explicitly enable the relevant category.

4. Processing of Personal Data

4.1 Personal Data is processed based on your consent or legal obligations (including AML and counter-terrorism financing requirements).
4.2 We process your data when you provide an email address or when you visit and use MindSwap. You may withdraw optional cookie and analytics consent at any time in the cookie preferences panel, and you may contact support about broader privacy requests (see Section 7).
4.3 To deliver our services, we may collect, store, use, disclose, erase, or destroy Personal Data, either within our affiliates or authorized third parties. MindSwap does not intentionally collect sensitive Personal Data (such as gender, racial origin, or financial position).
4.4 We use reasonable technical and organizational measures to protect Personal Data from unauthorized access, misuse, loss, or disclosure, and we train staff on data protection. However, we cannot guarantee absolute security of data provided or collected through MindSwap.
4.5 We may use Personal Data for the following purposes:
  • Informing you about exchange status.
  • Providing supporting documents.
  • Marketing purposes, only where marketing consent is enabled.
  • Improving MindSwap and our services through consent-gated analytics and first-party monitoring.
4.6 We may retain Personal Data after an exchange is completed when required by law or for regulatory, dispute resolution, or enforcement purposes. We retain data for a reasonable period or as required by applicable laws.
4.7 We do not knowingly collect Personal Data from underage individuals. If we suspect an underage user submitted Personal Data, we will cancel the exchange, prevent continued use of services, and delete the data as soon as possible.

5. Cookies

5.1 When you visit MindSwap, necessary cookies and storage support authentication, order access, CSRF protection, language choice, wallet connection safety, and security. These are always active because the Service cannot operate safely without them. Necessary consent audit records may be sent when you reject cookies, revoke consent, or save preferences, even if analytics consent is denied; these records are separate from optional analytics and are limited to proving and enforcing your consent choices.
5.2 Analytics cookies and similar storage are optional. MindSwap does not start Google Analytics, Real User Monitoring, Web Vitals reporting, or first-party monitoring session identifiers unless you explicitly enable the analytics category and the current analytics host is allowlisted.
5.3 Functional cookies are optional and support enhanced preferences or convenience features that are not strictly required for security or exchange processing.
5.4 Marketing cookies are optional and are used only if you enable the marketing category. Advertising or remarketing tags are not allowed to run from marketing-only consent unless their required analytics or measurement category is also granted where applicable.
5.5 Unknown or uncategorized cookies are treated as unauthorized non-essential cookies by default. MindSwap scans for unknown cookies, reports them internally for review, and removes them unless they are later classified as necessary or covered by an enabled category.
5.6 If you revoke analytics consent, MindSwap stops consent-gated monitoring services, clears active queues, and removes the first-party monitoring session identifier from sessionStorage. Future analytics send paths remain disabled until analytics consent is granted again.
5.7 You can change or revoke cookie preferences at any time from the cookie preferences panel. Browser-level opt-out tools remain available, including the Google Analytics opt-out tool at https://tools.google.com/dlpage/gaoptout and Google ad settings at https://adssettings.google.com/authenticated.

6. Reservation of Rights

6.1 We may amend this Privacy Policy at any time without prior notice. We process Personal Data according to the version in effect at the time of your consent.
6.2 When this Privacy Policy is updated, we will inform you via a banner notice on MindSwap. Continued use constitutes consent to the updated policy. Check the date at the top of this page to see the latest update.

7. Contact Details and Rights

7.1 Upon receipt of your request and after review, we will:
  • Provide information about whether we store Personal Data about you and what data we store.
  • Correct inaccurate Personal Data upon request.
  • Allow you to revoke consent for future use, in whole or in part, or request deletion of your Personal Data.
7.2 If you have questions about MindSwap, this Privacy Policy, or your Personal Data, contact us via the Support page or at support@mindswap.io.