PicSwap

Hidden from view. Unlocked by two.

Restoring your swap…

INVITE TO SWAP

Invite to swap

After both photos are uploaded, auto-delete after

ABOUT PICSWAP

Share a photo. See theirs too.

PicSwap is a private photo exchange for two people. Swap a photo or exchange selfies with someone you choose using an invite link. Both photos unlock after you both choose Confirm photo.

  1. Choose Invite to swap, pick a deletion time, then confirm to get a swap link.
  2. Share the swap link with one person.
  3. Choose your photo, then choose Confirm photo. You can upload after creating the link.

No account is needed for a free exchange. The default deletion timer is 5 days and starts after both photos are confirmed. The creator can sign in to delete a swap sooner for 1 Credit.

One active swap per browser is free. Sign in to buy Credits. Creating an extra swap costs 1 Credit. Shorter deletion timers cost extra Credits.

FAQ

Photo swap and selfie exchange questions

How can I exchange selfies privately?

Create a PicSwap invite link and share it with one person. Each of you chooses a photo and confirms it. Both photos unlock only after both confirmations. A free swap needs no account.

Is PicSwap a face swap or random matching app?

No. PicSwap exchanges photos between two people who share an invite link. It does not edit faces, match strangers, or verify that an uploaded selfie is recent or authentic.

When can I see their photo?

After joining, you can see a blurred preview if they sent a photo. Clear photos unlock after both people send a photo. You cannot change a photo after sending it.

Can I upload after creating the link?

Yes. Open your management link, choose a photo, then choose Confirm photo. Choosing a photo alone does not send it.

Does the photo prove who they are?

No. They can upload any photo. PicSwap does not check their identity or whether the photo is new.

How do I return to my swap?

We recommend signing in to your account to open or delete your swap.

Can I create more than one swap?

One active swap per browser is free. Sign in and choose Create another link to create an extra swap for 1 Credit.

When are photos deleted?

Both photos must be uploaded within 24 hours. After both upload, the selected deletion timer starts. The default is 5 days. Manual deletion costs 1 Credit.

Must we be online at the same time?

No. Return before the swap is deleted. This browser remembers your active swap, and signed-in accounts sync saved links.

Can I install PicSwap?

Use your browser’s install option. On iPhone or iPad, open PicSwap in Safari, tap Share, then Add to Home Screen. You still need the internet to swap photos.

Didn't find an answer? Contact us here ↗

Privacy

Your photos and links

Last updated: 23 October 2026

What stays on your device

Photos are resized and encrypted in your browser before upload. Original EXIF metadata is removed. The swap-link fragment is not sent with normal page requests. Account sync separately stores encrypted photo keys.

What we store

We store random room IDs, hashed access details, upload status, expiry times, and encrypted photos and previews. Free swaps need no name or email. A required browser cookie limits free use to one active swap. Its server record holds hashed browser and participant IDs, a room ID and expiry, not a full link. Another browser or cleared cookies can bypass this limit. We do not fingerprint devices or run analytics, ad trackers, or an admin photo viewer.

Link sync

When you sign in, we sync your swap details and photo keys in an encrypted account list. A server secret kept outside the database allows signed-in devices to unlock that list automatically. This protects a database leak alone, but the service can recover these keys. A compromise of the service and its secret could expose synced photos. This browser also saves wrapped swap details in IndexedDB so you can return to your active swap. Clearing site data removes the local copy.

Keep links private

Anyone with the full invite link can claim its one guest place. Your management link gives access to your swap. Browsers, clipboard apps, extensions and chat services may see links you use or share.

Deletion

Manual deletion costs 1 Credit and requires sign-in. Photos stop being available at expiry. Background cleanup removes stored encrypted files. We cannot promise instant removal from hosting backups, browser history, or copies another person saved.

Limits of encryption

Our server controls the rule that both people must upload. Encryption cannot stop fake photos, screenshots, sharing with the wrong person, a hacked device, or an operator changing this website. Hosting providers process connection details such as IP addresses. Rate limits use room IDs and shared counters, not a separate IP database.

Contact messages

The contact form sends your topic, message and reply email through our server, Formspree and Google email to a private support inbox. These messages are not end-to-end encrypted. Formspree’s free plan currently keeps a 30-day archive. Inbox copies have no automatic deletion timer and may stay while we handle your request and follow-up. Only the contact page loads Cloudflare Turnstile, which processes browser and connection details to check for spam. Do not send photos, passwords, private links or keys.

Accounts and requests

Google sign-in is optional. We store a random member ID, Google account ID, hashed login sessions and access permissions. We do not store your Google password. Signed-in sync includes encrypted photo keys. Use your management link to delete a swap. Use the contact form for other data requests. We may need safe information to check your request. We will not ask for your decryption key.

Payments and updates

Stripe processes Credit purchases and payment details. We store order references, payment status and Credit activity. We do not receive your full card number. Credits are for use within PicSwap, cannot be transferred or exchanged for cash, and do not renew automatically. For payment or refund requests, contact us. We review requests based on Credit use and applicable requirements. We do not sell photos or contact details.

Unused purchased Credits can be refunded automatically. A completely unused purchase receives a full refund; a partly used purchase receives a proportional refund for its unused Credits.

Refund policy ↗

Share with permission

Only share photos you have permission to share. Do not share intimate photos without consent or use PicSwap for exploitation, harassment or illegal content.

Open contact form ↗

End this swap?

Both photos and the invite will become unavailable.