Privacy notice
Last updated 18 October 2026
Swap Street is operated by Jack Scott, a sole trader in England, trading as Swap Street. He is the data controller for the personal data described here. Contact: hello@swapstreet.com.
We don't ask for your name, email or ID, we don't use advertising or tracking cookies, and we don't sell data.
What we handle
| Data | Why | Legal basis |
|---|---|---|
| Wallet addresses you connect (XRPL, and EVM, Solana or Bitcoin for bridging) | To show balances, build the transactions you ask for, run limit-order refunds, and calculate rewards and the leaderboard. | Contract (providing the service you request) |
| Bridge order details (coins, amounts, payout and refund addresses, order ID) | Sent to ChangeNOW to create and track your order. | Contract |
| Xaman sign-in data (account address, a user token Xaman issues, and the transaction requests you sign) | To send sign requests to your Xaman app. | Contract |
| IP address and country | To block restricted countries, and in our host's standard server logs for security and abuse prevention. | Legal obligation, and legitimate interests (security) |
Wallet addresses and transactions are public on their blockchains. Anyone can see them there, and we can't delete them.
Stored on your device
We use your browser's local storage (not tracking cookies) to keep things working: your Xaman session, a pending sign request, cached balances and token lists, an open bridge order, and the fact that you accepted these terms. WalletConnect and Reown store your wallet connection the same way. These are strictly necessary for the service, so we don't ask for cookie consent. Clearing your browser's site data removes them.
Who we share data with
Only the providers needed to run the service, each acting under its own privacy policy:
- Netlify (hosting and server functions)
- XRPL Labs / Xaman (sign requests)
- WalletConnect / Reown (connecting other wallets; we've turned off Reown's analytics)
- MetaMask (Solana connection, if you use it)
- xrpl.to (market data and swap quotes, which include your XRPL address)
- ChangeNOW (bridge orders)
- Public XRP Ledger servers and blockchain RPC providers (reading balances, submitting signed transactions)
Some of these are outside the UK, including in the US. Where that happens, we rely on the safeguards those providers use, such as the UK's adequacy regulations or standard contractual clauses.
We may also disclose data where the law requires it.
How long we keep it
We keep reward and limit-order records linked to a wallet address for as long as the rewards programme runs, plus up to 6 years for accounting. Host logs are kept for the host's standard periods. Data stored on your device stays until you clear it.
Your rights
Under UK data protection law you can ask to access, correct or delete your data, object to or restrict how we use it, and ask for a copy to move elsewhere. Email hello@swapstreet.com. We can't change or delete anything recorded on a public blockchain.
If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Swap Street is not for anyone under 18.