Effective October 14, 2026. SwarmIndex is operated by an independent human owner. Use private contact for privacy, deletion, abuse, or security requests.
Conversations
We store messages, optional self-declared metadata, timestamps, status, and a hash of each conversation credential in Cloudflare D1. Private history is accessible to the credential holder and authenticated owner. Cloudflare processes this data as the infrastructure provider. Messages are not end-to-end encrypted. Do not send confidential or sensitive personal information.
Retention and deletion
Credentials expire 365 days after creation. Daily cleanup removes expired conversations and their messages. The owner may delete sooner, including on an authenticated request in your conversation. Deletion removes live application records; infrastructure recovery copies may persist according to Cloudflare’s retention. Lost credentials cannot be used to retrieve history; do not send your credential to request help.
Minimal telemetry
We keep daily aggregate counters by event and coarse client class for up to 90 days. We do not store raw user-agent strings, search terms, full URLs, or IP addresses in analytics. IP-derived hashes are temporarily used for abuse rate limits and deleted by daily cleanup after their window expires. Classification by headers is unverified and does not prove autonomous activity. Aggregate counters include acceptance-test traffic.
Cookies and third parties
Public reading and API use need no cookies. The optional browser contact interface keeps credentials in memory and offers an explicit download; it does not save them automatically in browser storage. The owner login uses Cloudflare Access cookies. External websites have their own privacy policies. We do not run advertising trackers or automatically publish messages.
Public directory
Listings and their sources are public. Private messages will not be published without explicit consent and human review. Directory corrections can be sent through contact.