KeySwap is a small site run by one person. This explains exactly what it stores about you, who else can see it, and how to delete all of it.
From Steam, when you sign in. Your Steam ID, display name and avatar. If your Steam profile is public, also the date you joined Steam, your Steam level and how many games you own. If your profile is private, those are simply missing — KeySwap cannot see them and does not try.
The lists you build. The games in your library and on your want list, and the spare keys you list. You choose what goes in these, either by importing from Steam or by typing them in.
Key codes, encrypted. A Steam key you add is encrypted before it is stored and is only ever decrypted for the person you traded it to, on the trade page. It is never shown to anyone else and never put in an email.
Your trades. Who traded what with whom, when, and how it ended.
Your email address, only if you give one. It is optional. It is used to tell you about your own trades and nothing else — no newsletters, no marketing, and it is never given to anyone.
Reports. If you report someone, the report is kept along with who filed it, so the same trade cannot be reported twice and repeated problems can be seen.
All three of your lists are public to other signed-in users — your spare keys, your want list, and your library. That is the point of the site: matching you with someone depends on both of you seeing what the other has and wants, and your library is what stops people offering you games you already own. Your name, avatar, Steam join date, trade record and taste tags are visible on your profile too.
Your key codes and your email address are not. A key is shown only to the person who traded for it. An email address is never shown to anyone, ever.
To run the thing you signed up for: matching you with trades, letting you carry one out, and keeping a record of what happened. Beyond that, report and trade history are kept to spot people who take keys without giving any — which protects everyone else using the site.
Nobody else. Your data is not sold, rented, or shared with advertisers, and there are no advertisers.
There is none. KeySwap has no analytics, no advertising pixels and no third-party scripts of any kind. The only cookie it sets is the one that keeps you signed in. There is no cookie banner because there is nothing to ask you about.
Until you delete your account. Doing that removes your profile, your lists, your spare keys and any key codes you had stored, immediately and permanently.
Trades you were part of are kept, with your name removed from them. Someone you traded with keeps their own record of what they gave and received — that record is partly theirs, and erasing it would take away their history along with yours.
Reports split the same way. A report about you goes when you do. A report you filed about someone else stays, without your name on it, because it is what warns the next person who trades with them.
One exception, and only if your account is suspended when you delete it. KeySwap keeps a single line recording that your Steam account is suspended and until when — no name, no email, no lists, nothing else. Without it, deleting and signing up again would take seconds and would be a way around every suspension, which would make the whole thing pointless for the people it protects. That line is removed once the suspension runs out. Delete an account in good standing and nothing at all is kept.
On your Profile tab, at the bottom. It happens straight away and cannot be undone.
The one time it is refused is while a trade of yours is still running — you cannot disappear holding someone else’s key. Finish or cancel the trade, then delete.
If you are in the UK or EU, you have the right to see what is held about you, correct it, delete it, or object to it being held. Deleting is the button above.For anything else, there is no contact address set up yet — see below.
You also have the right to complain to your data protection regulator — in the UK that is the Information Commissioner’s Office.
If this changes in a way that matters, the date at the top changes. KeySwap will not quietly start collecting something this page does not mention.
No contact address has been set up yet. Until one is, the surest way to have your data removed is the delete button on your Profile tab, which needs nobody’s help and takes effect immediately.