Privacy
We barely touch your data.
Last updated September 2026.
The one-paragraph version
Your team shares one board, so teams, shifts, and activity sync to our database (Supabase) — that's what lets every phone see the same shifts. Your sign-in session stays on your device. There is no adtech, no tracking, and nothing for sale: the database holds your board and nothing else.
What stays on your device
Your sign-in session and notification read-state live in localStorage under your control. Anyone with access to that browser can read them; anyone without it cannot. Team names, rosters, shifts, and the activity feed sync to the shared database so the whole crew sees the same board.
What we don't collect
No tracking pixels, no analytics beacons, no ad cookies. Managers sign in with a magic link (email only, no passwords to leak); staff join with an invite code and never hand over anything but a name. The marketing page doesn't phone home either.
Payments
Subscriptions are processed by Lemon Squeezy, our merchant of record — they handle cards, tax and receipts, and shiftswap itself never sees or stores your card number.
Your control
Rename or remove teammates anytime from the Team page. Wipe everything with “Erase all local data” in Settings. Leaving a team is as simple as signing out; joining again is one invite link.
Kids and workplaces
shiftswap is a workplace tool bought by managers for their staff. If your team includes minors, their manager — not us — is responsible for what's shared on the board.