Who we are and scope
TestSwap (https://testswap.asoftware.com.tr) is a volunteer platform where developers test each other's apps to meet Google Play's closed testing requirement. The site is not affiliated with Google LLC. In this text "we" means the person operating the site and "you" means a member or visitor. By using the site you accept this policy.
What data we collect
- From your Google account, when you sign in: your Google account ID, e-mail address, name and profile picture. We never see or store your password; sign-in goes through Google's own system (OAuth).
- What you enter in your profile: username, Play Store country, the Gmail address you use on the Play Store, interface language and e-mail notification preference.
- As an app owner: your app's name, package name, description, icon, Google Group address and the countries the test is open in.
- As a tester: the screenshots you upload, the feedback you write, optional device model and Android version, points gained and lost, badges and your participation history.
- Reports: the note you write when reporting a member; reports made about you and admin decisions.
- Automatically: your IP address and browser information (for security, rate limiting and error logs), a session cookie and a language cookie. Server access logs include the pages you visit.
What we use it for
- Running your account and session.
- Letting you reserve seats, join tests and upload proof; showing you tests that match your country.
- Giving the owner of an app you reserved a seat in the details needed to add you to their tester list.
- Sending e-mail notifications such as invitations, deadline reminders, approvals and results.
- Calculating points, rankings and badges.
- Detecting abuse such as fake proof or leaving early, and reviewing reports.
- Finding bugs and keeping the site secure.
Legal basis: performance of your membership (contract) and our legitimate interest in running the site securely. You can turn off informational e-mails in Settings; e-mails required for the service to work (invitations, deadlines, proof requests) keep coming.
Who can see your data
- Other members: your username, points, badges, number of completed tests, your public profile page and the test requests you open (app name, package name, description, icon). Your real name and Play Gmail address are not public.
- App owners: the owner of an app you reserved a seat in sees your username and Play Gmail address (to add you to the tester list), the screenshots you upload and the feedback you write.
- Site administrators: can access all data to operate the site and review reports.
- Google: sign-in uses Google OAuth. Fonts are loaded from Google Fonts, which sends your IP address to Google. Google Group, Play Store and Play Console links lead to Google's own pages, where Google's privacy policy applies.
- Hosting: data is stored on the server that hosts the site. The hosting provider operates the server and does not use the data for its own purposes.
- Legal obligations: data may be disclosed when a competent authority lawfully requires it.
We do not sell, rent or use your data for advertising. There are no third-party analytics or advertising tools on the site.
Cookies and browser storage
- Session cookie (required): remembers that you are signed in; deleted when you close the browser or the session expires.
- Language cookie (
lang): keeps your interface language for one year. - Theme preference: your light/dark choice stays in your browser's local storage and is never sent to the server.
- Offline cache: if you add the site to your phone, the browser caches only styles, scripts and the offline page.
We use no tracking, advertising or analytics cookies.
How long we keep it
- Account and profile data: for as long as your account exists.
- Screenshots: kept after the test ends in case a report needs review; deleted when your account is deleted. Screenshots are not in a public folder; only you, the owner of that app and site administrators can view them.
- Point history and participation records: for as long as your account exists, to keep rankings consistent; unlinked from you when the account is deleted.
- Application error logs: 30 days. Sent e-mail records 30 days, read notifications 90 days, rate-limit counters 2 days. Server access logs follow the hosting provider's retention.
Your rights
Under Turkey's Personal Data Protection Law (KVKK, article 11) and, if you live in the EU, the GDPR, you have the right to:
- Learn which of your data is processed and request a copy.
- Correction: you can change your username, Play Store country, Gmail address, language and notification preferences yourself in Settings.
- Deletion: write to us to delete your account and data; we complete it within 30 days. If you are in a running test you need to leave it first.
- Object to processing and receive your data in a portable format.
- Complain to the Turkish Personal Data Protection Board or, in the EU, to your national data protection authority.
For all requests: testswap@asoftware.com.tr. To verify your identity we ask that you write from the Google e-mail address registered on the site. We reply within 30 days at the latest.
Security
The site runs over HTTPS, stores no passwords, and protects forms with CSRF protection and rate limiting. Screenshots are stored in a folder that is not reachable from the web and are shown only to authorised people. No system is completely secure; if a breach affects your data we will inform the affected members and, where required, the authority.
Age limit
A Google Play developer account requires you to be 18; this site is not intended for anyone under 18. If we learn that we hold data about a person under 18 we delete it.
Changes
When we update this policy we change the date on this page. For a significant change affecting your rights we also notify your registered e-mail address.
Contact
Questions and requests: testswap@asoftware.com.tr