Privacy Policy

Last updated 2026-09-28

Swanum (“we”) operates Comps. Contact for any privacy question: contact@swanum.com.

What we collect about you

• Account: your email address, plan, and when you signed up. No password.
• API usage: for each request — time, endpoint, the search text, a hash of the parameters, status, latency, whether it was cached. Used for metering, quotas, abuse prevention and improving coverage.
• Web tool without an account: a daily-rotating keyed hash of your IP address to enforce the free lookup limit. We don't store the IP itself.
• Payments: none — Comps is free during the beta and we collect no payment details.
• Analytics: counts of events (searches, sign-ups) without IP addresses. For sign-ups we also keep which website sent you and the first page you opened (see the sc_src cookie below) and, if you tell us, what you'll use Comps for.
• Feedback: if you send us a message from the site, we keep it, the page you sent it from and the email address you give us (if any) so we can reply.

Cookies

First-party cookies only, set by swanum.com/comps and never shared: a session cookie when you're logged in, a security (CSRF) cookie, a short-lived cookie that shows a new API key once (2 minutes) and one that carries your sign-up answers through the email link (1 hour). One cookie is for measurement: sc_src remembers which website sent you and the first page you opened (no identifier, 90 days), so we can tell which channels bring sign-ups. No advertising cookies and no third-party trackers.

Marketplace data

We collect item-level facts from public marketplace pages (title, price, currency, condition, size, brand, category, dates, item link and the marketplace's own image link). We do not collect or store seller or buyer names, ids, profile links or any other personal data about marketplace users, and we don't copy images.

Legal bases and retention

Account and usage data: to perform our contract with you (GDPR Art. 6(1)(b)) and our legitimate interest in preventing abuse (6(1)(f)). Kept while your account exists; when you delete it we remove your email and keys, and keep usage logs only in de-identified form.

Processors

Hetzner (hosting, Germany), Cloudflare (network), our email provider (sign-in links).

Your rights

You can access, correct, export or delete your data, object to processing, and complain to your data-protection authority. Email us and we'll respond within 30 days. You can delete your account yourself from the dashboard.