Social Signal Swap

Privacy Policy

Last updated: September 2026

This policy explains what information Social Signal Swap collects when you use the site, why, and how it's handled. Social Signal Swap is a cross-posting exchange where creators post videos, cross-post each other's content, and negotiate deals directly with one another.

Information we collect

When you sign in with Instagram or YouTube, we receive only what that platform's login shares with us:

• Your username/handle, display name, and profile picture
• Your public bio/channel description, if available
• Your follower or subscriber count, if the account has made it public

We do not receive your Instagram or Google password, and we never see or store it. We also don't post, message, or change anything on your Instagram or YouTube account — access is read-only, used only to verify you and keep your profile accurate.

Beyond that, we store what you choose to add on Social Signal Swap itself: your niche, your written bio, the categories you pick, the videos you post (title, link, note, price if any), any messages you send other creators through the negotiation feature, and — for Momentum-tier creators — any payment links or handles you choose to add (e.g. a Venmo or PayPal handle) so a counterparty in a paid deal knows where to send payment. Payment links you add are shown only to the other creator in an agreed paid deal with you, never published on your public bio page. We never see or store the actual payment itself — that happens entirely off-platform, directly between the two of you.

How we use it

• To create and display your creator profile and public bio page
• To show your posted videos in the feed and search/discover pages
• To connect you with other creators for cross-posting and negotiation
• To keep your follower count, avatar, and bio in sync with your Instagram or YouTube account each time you sign in (you can't edit these by hand, on purpose — it keeps the numbers real)

What's public vs. private

Your bio page (avatar, tier, follower count, bio, categories, posted videos, and reviews) is public and can be viewed by anyone with the link, and shows up in Social Signal Swap's search. Messages inside a negotiation thread are visible only to the two creators in that thread.

Who we share, transfer, or disclose your data with

We do not sell your data, and we do not share, transfer, or disclose Google user data (or any other data we collect) to any third party for their own advertising, marketing, or research purposes. The only sharing that happens is:

• Publicly, on your own bio page — the profile info you sign in with (avatar, handle, follower/subscriber count, bio) and the videos you choose to post are shown on your public Social Signal Swap bio page, visible to anyone with the link and in on-site search. This is the core function of the product and is fully within your control — you choose what to post.
• With another creator you're negotiating with — messages you send in a negotiation thread are visible only to you and the other creator in that specific thread.
• With our infrastructure provider (Netlify, Inc.), which hosts our servers, functions, and database (Netlify Blobs) and processes data solely to operate the site on our behalf, under its own privacy policy. Netlify does not use this data for its own purposes.
• If legally required — we may disclose data if compelled by law (e.g. a valid subpoena or court order).

We never transfer Google user data to any other party for the purpose of determining a person's creditworthiness, for lending, insurance eligibility, or employment, and we never use it to build a profile for advertising or sell it to data brokers.

How we protect your data

• Encryption in transit — the entire site, API, and every sign-in flow run over HTTPS/TLS. Nothing is ever sent unencrypted.
• Encryption at rest — profile, drop, message, and report data is stored in Netlify Blobs, which encrypts data at rest on its infrastructure.
• No passwords ever stored in plain text — on the rare account that sets one, it's hashed with PBKDF2 (100,000 iterations) and a unique per-account salt; we never store or can recover the original password.
• Read-only access to your Google/Instagram account — we request only the minimum scope needed (e.g. read-only YouTube channel data to show your subscriber count and tier), never write or management access. We cannot post, message, or change anything on your actual Instagram or YouTube account.
• Least-privilege access — access to the underlying data store is limited to the site's own server-side functions; there is no public or third-party access to the raw database.
• Data minimization — we only request and retain the specific fields (handle, avatar, bio, follower count) needed to run your profile — nothing beyond that from your connected account.

Google API Services User Data Policy

Social Signal Swap's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements — we use YouTube data only to display your subscriber count and public channel info on your own profile, never for advertising, never sold, and never shared beyond what's described above.

Cookies & local storage

We use your browser's local storage to remember that you're signed in between visits (just your handle, nothing sensitive). No third-party tracking cookies are used.

Data retention & deletion

Your profile and posted content stay on Social Signal Swap until you ask us to remove them. To delete your account and associated data, contact us at the email below.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: theouterdoorpodcast@gmail.com