Vault is a personal tracker for games, films, and shows. This policy explains exactly what
it stores, where that lives, and how to remove it. It covers both the Android app and the
website.
You can use Vault without an account. Signed out, everything you add stays
in your device's local storage. Nothing about your list is sent anywhere, and there is
nothing for us to hold.
What Vault stores when you sign in
Signing in is optional, and is only there to sync your list between devices and to use the
friends features. Vault uses Google Sign-In. If you sign in, the following is stored on our
behalf by Supabase:
Your email address, display name and profile picture link, as provided by Google
A username, generated from that name, which is how friends find you
Your list: titles, category, priority, status, your own scores, notes, progress through
a show, and the dates you added or finished something
Your friend connections, and any pending friend requests
Titles you send to friends, and the emoji reactions on them
Whether you switched on "Share my activity", which is off unless you turn it on
What Vault does not do
No advertising, and no advertising identifiers
No analytics or tracking of any kind. There are no third party trackers in the app or
on the site
No location, contacts, photos, camera, microphone or files
Nothing is sold or shared for marketing
Who else is involved
Google handles sign-in. Vault never sees your Google password.
Supabase stores your account and your list.
Cloudflare hosts the website and runs the small services that fetch
title information.
IGDB (games) and TMDB (films and shows) provide
cover art, scores, release dates and where a title is available. Only the title being
looked up is sent to them. Nothing identifying you is included.
JustWatch provides which streaming services a film or show is on,
passed along by TMDB. Nothing about you is sent to JustWatch.
What other people can see
Your list is private by default. A person you have accepted as a friend can view your
vault. If you turn on "Share my activity", accepted friends can also see what you have added
or finished in the last 30 days. Turning it off stops that immediately. Your email address is
never shown to other users.
How long it is kept, and how to delete it
Your data is kept until you remove it. In Settings, Delete Account erases
your stored list, your profile and your login itself. This runs immediately and cannot be
undone. Signing out alone does not delete anything.
To remove a list without an account, clearing the app's storage, or uninstalling, removes
it from the device.
Children
Vault is not directed at children under 13 and is not knowingly used to collect their
information.
Security
Traffic is encrypted in transit. Access to stored data is enforced at the database level,
so one account cannot read another's list except through an accepted friendship.
Changes
If this policy changes, the date at the top changes with it.