Privacy Policy

1. Who we are

swp.gg (“we”, “us”) operates a custodial crypto payment gateway at swp.gg. This policy covers the website, merchant dashboard, hosted checkout (/pay), and APIs.

2. Data we collect

Depending on how you use the service, we may process:

• Account — username, email, password hash, optional 2FA secrets and backup-code hashes
• Merchant settings — webhook URLs, accepted chains, fee and payment preferences you configure
• Optional checkout branding — shop / business name, business URL, and logos (see section 3)
• Payments — invoice amounts, selected chain, deposit addresses, transaction hashes, balances, and ledger entries
• Security — IP addresses used for login, API, and withdraw controls; session cookies
• Support — messages you send us by email or Telegram

3. Optional checkout branding

Shop / business name, business URL, and logos are optional. We collect them only to display your branding on the hosted checkout page so payers can confirm they are paying the intended merchant.

• You can leave these fields blank. Invoices and payments still work.
• You can add, change, or remove them anytime in Payments settings.
• We do not sell this data or use it for advertising.
• If you set branding, it is visible to anyone who opens your payment link.

4. How we use data

We use the data above to:

• Operate the gateway (invoices, deposits, withdrawals, converts, webhooks)
• Secure accounts (login, 2FA, withdraw IP allowlists, API key controls)
• Send transactional email (verification, security alerts, password reset)
• Keep the service reliable and debug operational issues

We do not use optional branding data for anything other than checkout / payment UI display.

5. Sharing

We do not sell personal data. We may share data with infrastructure providers (hosting, email delivery, blockchain RPC/indexing) solely to run the service. Amounts, addresses, and transaction hashes you broadcast are public on the relevant blockchain.

6. Law enforcement

We do not freeze accounts, balances, or transactions as a routine privacy or AML practice. We only freeze, hold, or restrict funds or transactions when we receive a valid order or other compulsory legal process from a court or law-enforcement / competent authority. See our AML Policy.

We may disclose account or payment records when legally required by such an order or process.

7. Retention

Account and ledger records are kept while your account is active and for a reasonable period afterward for security, disputes, and (if applicable) legal process. Optional branding can be cleared in the dashboard at any time.

8. Your choices

Update email, security settings, and checkout branding in the dashboard. For a data export or account deletion request, email [email protected].

9. Contact

Privacy questions: [email protected]. Related: AML Policy, Security, Terms.