Privacy Policy

Updated: August 2, 2026

1. Scope of this document

This document explains what data Swaplse (the swaplse.com website) processes, for what purpose, on what legal basis, how long the data is kept and how you can act on it. It covers the website, your account area, image and short video generation, animating an uploaded frame, the AI character chat, the public gallery, your personal collection of works and your correspondence with support.

It does not cover third party websites you may reach through a link, or software you use outside our service. By using the service you confirm that you have read this document.

The words "data", "personal data" and "processing" carry the meaning given to them by applicable data protection law, including the EU General Data Protection Regulation (GDPR) where it applies to you.

2. Who is responsible for the processing and how to reach us

The operator of Swaplse is responsible for the processing described here. It decides the purposes and the means of processing and answers user requests.

The only address for data related enquiries is support@swaplse.com. Please state the subject of your message in the subject line, for example "Privacy" or "Account deletion". Besides email there is a support form on the site, and every published work has a "Report" button on its page. The service has no other mailboxes.

Requests concerning the contents of an account are accepted from the email address the account is registered to: this is how we confirm that the request comes from the account holder.

3. What data we process

We process only the data the service needs in order to work. By category:

• Account: email address, login, password hash, registration date, whether the address has been confirmed, plus your coin balance and any plan you purchased.
• Uploaded material: the photos and video frames you send to the service for processing or animation.
• Generated results: the images and short videos produced, their technical parameters and whether a work is published in the public gallery or kept only in your personal collection.
• Prompt text: the descriptions you type and the generation parameters, including the model selected and its settings.
• AI character chat: your messages, the character replies and the character settings you configured. This history is what keeps a conversation coherent across sessions and is stored in your account.
• Payments: invoice amount and currency, payment status, transaction hash and the wallet address the payment came from, and what was bought (a coin pack or a plan). The service does not accept or store bank card details.
• Technical data: IP address, basic request details (browser type, language, time of the request), session identifier, and anonymised visit statistics.
• Support enquiries: the text of your message, any attachments you added yourself and the history of the enquiry.

We do not ask for identity documents, phone numbers, postal addresses or health data. If you voluntarily include such details in the free text of a support message, they are processed only within that enquiry.

4. Purposes of processing

• Creating and running your account, signing you in, confirming your email address and restoring access.
• Performing generations and frame animation, showing you the result and storing works in your collection.
• Running the AI character chat, including keeping the context of a conversation.
• Issuing invoices, crediting coins, and keeping a record of purchases and refunds.
• Answering your support enquiries and handling reports about published works.
• Moderation: detecting prohibited content by automated systems and by human review.
• Security of the service: protection against password guessing, bulk registration, limit circumvention, automated data harvesting and other abuse.
• Service email: address confirmation, invoices and their status, notices about changes to the service or to the rules.
• Anonymised visit statistics, so that we understand load and which parts of the site are used.
• Meeting obligations imposed on us by applicable law, including the retention of records of transactions.

5. Legal bases

Where the GDPR applies, we rely on the following grounds under Article 6.

• Performance of a contract (Article 6(1)(b)). Without this data the service cannot be provided: the account and password are needed to sign you in, the uploaded frame and the prompt are needed to run a generation, the amount and transaction hash are needed to credit coins, and the collection is what gives you access to your own results.
• Legal obligation (Article 6(1)(c)). Records of payments received must be retained to the extent and for the period required by applicable accounting and tax law. The same ground covers our duty to respond to lawful requests from competent authorities.
• Consent (Article 6(1)(a)). Consent covers actions you can decline without losing access to the service: publishing your work in the public gallery, analytics cookies, and any extra details you choose to send us in the free text of a message. Consent can be withdrawn at any time, which does not affect the lawfulness of processing carried out before the withdrawal.
• Legitimate interest (Article 6(1)(f)). Security and moderation rest on this ground: keeping the IP address and basic request details to defend against password guessing and bulk registration, checking uploads and publications for prohibited content, preventing limit circumvention and automated harvesting, and running support correspondence. We weigh that interest against your rights and keep the data set to the minimum needed.

Because the service is age restricted, we never rely on a child's consent under any of these grounds.

6. Uploaded material and generated results

This is the most sensitive category, so it has its own rules. The photos and frames you upload, and the results created from them, are processed solely to carry out your request, to show you the result and to keep it in your collection.

The generation itself physically runs on the hardware of a third party GPU provider: the file and the request parameters are sent there for the duration of the computation. That provider acts on our instructions and may not use the material for its own purposes.

Uploaded material and results are not used for advertising, are not shared with ad networks, are not sold and are not published without an action on your part. A work appears in the public gallery only when you publish it there; until then only you can see it. Staff access to the content is possible in two situations: handling your support enquiry, and moderation triggered by an automated system or by a report.

7. Retention periods

• Account: for as long as the account exists. Once it is deleted, the account, the works and any remaining coins are removed.
• Intermediate generation files: deleted automatically once the technical retention period expires; no action on your part is required.
• Works in your collection: kept until you delete them or until the account is deleted.
• Prompts and AI character chat history: stored in the account and removed with it, or when you delete the conversation.
• Payment records: kept for as long as applicable accounting and tax law requires. These records outlive account deletion, because they are held on a legal obligation rather than on your contract with us.
• Technical data and security logs: kept for the limited period needed to investigate abuse, then deleted or anonymised.
• Support enquiries: kept to the extent needed for the history of the enquiry and for resolving any dispute arising from it.

Individual items may be kept longer than stated where this is necessary to establish, exercise or defend legal claims, or where applicable law requires their retention.

8. Who we share data with

We do not sell personal data. Data is passed only to the service providers the platform cannot run without, and only to the extent a given task requires:

• Email provider: sending service email. The email address and the message text are passed on.
• GPU provider: running generations. The uploaded file and the request parameters are passed on for the duration of the computation.
• Hosting provider: hosting the service and storing data on servers.
• Public blockchain explorers: confirming that a payment arrived. This uses the wallet address and the amount, which are already public on the blockchain.
• Google Analytics: anonymised website visit statistics.

Data may also be disclosed to competent authorities where applicable law requires it, or where material involving minors is concerned. If the service or part of it changes ownership, data may pass to the successor provided the same protection obligations continue to apply.

9. Transfers outside your country

The service providers listed above may be located in other countries, so your data may be processed outside the country where you live.

For such transfers we use the mechanisms provided by applicable law: contractual data protection safeguards with each provider, limiting what is transferred, and a ban on the provider using the data for its own purposes. We deliberately do not name specific companies or jurisdictions in this document, since those details can change; you can ask support in writing which recipients are involved for your data.

10. Data security

Traffic between you and the site runs over an encrypted channel (TLS). Passwords are stored only as a hash and cannot be recovered in their original form, not even by us. Internal access to data is limited to the people who need it for their work and is governed by separated permissions. The login session relies on a service cookie that is not readable by scripts on the page.

We cannot promise absolute protection: no system for transmitting and storing data on the internet is completely immune. On your side, use a unique password, do not share account access with anyone, and tell us if you notice suspicious activity in your account.

11. Cookies

The service uses strictly necessary cookies (the login session, the interface language and the referral code) and analytics cookies for anonymised statistics. There are no advertising or retargeting trackers.

The full list with names, purposes and lifetimes, along with the ways to control them, is set out in the Cookie Policy.

12. Your rights

In relation to your data you have the right of access, rectification, erasure, restriction of processing, portability, objection to processing, rights concerning automated decisions, withdrawal of a consent previously given, and the right to lodge a complaint with a supervisory authority.

Send your request to support@swaplse.com from the email address the account is registered to. We answer within one month of receiving the request, and may extend that by a further two months for complex or numerous requests, in which case we will tell you. Some actions need no request at all: a work can be deleted in your collection, and the account can be deleted in Settings, section "Account".

Each right and the procedure for making a request are described in detail in the GDPR rights page.

13. Data of minors

The service is intended only for people aged 18 or over, and where the age of majority in your country is higher, from that age. We do not knowingly collect data from minors and the service is not directed at them.

If we learn that an account was created by someone below the required age, the account is closed and the data associated with it is deleted. If you believe a minor has provided us with their data, write to support@swaplse.com.

14. Changes to this policy

This policy may change as the service develops and as applicable law requires. The current version is always published on this page, and the date of the last update is shown at the top of the document.

We announce material changes affecting the categories of data, the purposes or the legal bases on the website, and where necessary by email to the address on the account. Continuing to use the service after a change takes effect means you have read the new version.