Privacy policy

This policy describes how the operator of this website and application (“we”, “us”) handles personal information about visitors and registered users (“you”). The service name shown in the product is the public-facing brand for this installation.

We may process: account details you provide (such as name and email); authentication and security data (including session identifiers and optional two-factor codes); content you add to the service (such as collection records, photos, notes, and community posts); technical logs (such as IP address, user agent, and timestamps) needed to operate and secure the service; and communications you send to us (such as support or privacy requests).

We use personal information to provide and improve the service, authenticate users, prevent abuse, comply with law, respond to your requests, and communicate about the product. Where GDPR applies, we rely on appropriate bases such as contract (providing the service you asked for), legitimate interests (security and product improvement balanced against your rights), and consent where required (for example non-essential cookies or marketing when you enable those features).

We use cookies or local storage as needed for sign-in, preferences, security, and optional analytics or marketing when configured. When the cookie banner is enabled, you can choose whether to allow optional categories. You can also control cookies through your browser settings.

We may share data with infrastructure and service providers that help us host, deliver email, process payments, or run security features. Those providers process data on our instructions where applicable. We do not sell personal information as a line of business; if we introduce advertising or data sales in the future, we will update this policy and any required controls.

We keep information for as long as your account is active and for a reasonable period afterward for backups, security, and legal compliance. Some aggregated or de-identified data may be kept longer.

Depending on your location, you may have rights to access, correct, delete, export, or object to certain processing, and to withdraw consent where processing is consent-based. When enabled, this site may offer a “Your privacy rights” page and a basic data export for signed-in users. You may also contact us using the privacy contact address published by the operator of this installation.

If you access the service from outside the country where servers are located, your information may be transferred and protected as required by applicable law. The service is not directed to children under the age where parental consent is required. We may update this policy from time to time; material changes should be reflected by updating this page and, where appropriate, notifying users.