Privacy policy
Questions or privacy requests: support@mediavaultplus.app
Your collection and account
You can keep a collection on your device without an account. If you create an account, Supabase processes your sign-in details and account identifier. Apple or Google also processes sign-in information if you choose its sign-in option. Your profile can include a username, display name, bio, avatar and appearance preferences. We also record the app platform (iOS or Android).
When you use cloud collection sync while signed in, Supabase stores your collection entries and groups linked to your account. This includes the item identifiers and metadata, ratings, notes, purchase dates and prices, estimated values, purchase and shelf locations, condition and loan details you enter. Local collection photos remain on your device; they are not uploaded by collection sync. An avatar you choose to upload is stored online and has a public image URL.
Public profile and sharing features expose the profile information and collection items you choose to share. Private collection notes, purchase details and loan details are not intended as public sharing fields. Avoid putting sensitive information in your public profile or other shared text.
Your public profile can be discovered through username search, which shows your username, display name and avatar. When you follow someone, Supabase stores the follower and followed account identifiers and the time of the relationship. Other signed-in users can see who follows you and whom you follow, including those profiles and follower/following counts. These relationships are not private to you or the person followed. You can remove a relationship you created by unfollowing. This feature does not read your device address book.
If you report content, we keep the report, your account identifier and a copy of the reported text so we can review it. Reports are kept for 12 months after they are resolved. If you block someone, we store that block with both account identifiers so follows between you can be removed and refused; it is deleted if you unblock them or either account is deleted. We also record on your profile which version of the Terms of Use you accepted, and when.
Searches, scans and background lookups
Searching or scanning sends the relevant barcode, ISBN, ISSN, title, platform or provider identifier to the services needed to find that item. These are not requests to upload your whole collection to those providers.
- Supabase hosts our catalog proxy, shared catalog cache and lookup queue. The proxy forwards film and TV queries to TMDB, game queries to RAWG or IGDB, and barcode queries to EAN-Search. IGDB access uses our server's Twitch authentication; you do not need a Twitch account. Your app authentication is handled by our server rather than passed to these catalog providers.
- The app also contacts UPCitemDB for barcodes, Discogs for music search and release details (including exact-barcode pressing confirmation), Open Library for book ISBNs, authors and editions, and OpenAlex for periodical ISSNs.
- A signed-in scan that misses the cache can start a background lookup for supported formats. Depending on the format, our server checks Blu-ray.com for film/TV discs, LDDB for LaserDiscs, PriceCharting and IGDB for video games, or UPCitemDB/EAN-Search followed by BoardGameGeek for tabletop games. Music confirmation uses Discogs. Fetch Details can also request a supported lookup. Background lookup is not restricted to pressing Fetch Details.
- Cover images load from the image hosts associated with the returned catalog records, such as TMDB, IGDB, RAWG, Discogs and Open Library. Those hosts receive the image request.
Direct connections from your device reveal its network address to the destination service; server-side requests originate from our server. Providers may process technical request information under their own privacy policies. Our servers retain lookup requests, account-linked queue/rate-limit records and status information to deliver results, prevent abuse and diagnose failures. Shared catalog results can remain available to other users. Searches and scans are therefore not all transient or anonymous.
External links in the app, such as the eBay search link, open other sites and send the linked search details to those sites, whose own privacy practices apply.
Game prices
PriceCharting supplies dated market-price observations, not the price you paid or a guaranteed resale value. Our shared cache retains product barcodes, source URLs and product identifiers, platform, capture times, labelled price points with currencies and availability, and evidence hashes. Older observations remain as history; these public product observations do not contain an account identifier.
A price refresh sends the barcode to our server and creates account-linked request/queue records. Refresh all game prices submits the eligible barcodes held in your local collection; the refresh service does not read your cloud collection to discover them. The server retrieves the product's prices from PriceCharting. The older title/platform value lookup also sends those item details to our server and PriceCharting. Request records can be retained separately from the public price observations. Refreshing market prices does not change the estimated value you entered.
Images, feedback and diagnostics
When image identification is used, our Supabase function sends the selected cover image or image URL to Google Cloud Vision for recognition. The app requires sign-in for this feature. It does not upload your photo library. Recognition requests are processed for the lookup; this feature does not create a collection-photo archive on our server.
Feedback submitted in the app is stored with your account. If you email support, we receive your address and the contents you send through our email service. Please do not send passwords or sensitive personal information.
Sentry receives crash reports and diagnostic context to help us fix faults. Reports can include app/device/OS information, errors and an account identifier when signed in. Reporting is enabled by default and can be disabled in Settings. The app disables default personal-information collection and production session replay. We do not use diagnostics for advertising or cross-app tracking.
The app also contacts Expo's update service to check for and download compatible app updates. These requests include technical app/runtime and platform information and normal network-request information.
Choices, retention and deletion
You can edit or delete collection information and choose whether to use account, cloud, sharing, lookup and image features. Camera and photo-library access use device permissions. You can turn off crash reporting in Settings.
Delete Account in the app removes the account, profile, associated cloud collection/sharing data, feedback and stored avatars through our account-deletion service. Shared product metadata and price observations are not personal collection records and can remain. Some operational records can remain with the account reference removed. Account deletion is separate from copies on your device, exports, email correspondence and recipients' copies of information you shared. Contact support for help or a deletion request if you cannot access the app.
We retain account data to provide the features you use until it is removed, and operational/support records as needed to run and protect the service or meet legal requirements. We do not promise a fixed deletion period for third-party logs or backups. Network services use encrypted HTTPS connections; no system is completely secure.
Advertising, children and changes
We do not sell personal information, serve targeted ads, or track you across other companies' apps and websites. The app is not directed to children under 13. Contact us if you believe a child has supplied personal information. We may update this policy as features change and will show the updated date here.
This website
These pages contain no analytics, tracking scripts or embedded third-party resources. GitHub Pages, our website host, processes normal web-request information to serve the pages. Following an external link takes you to that site's own service and privacy practices.