Privacy Policy
Mintboxd is a mobile app that records the physical media you own:
vinyl, CDs, cassettes, Blu-rays, VHS, game cartridges, books and
figures. This page sets out what data is processed when you use it.
The informational website itself (mintboxd.com) runs no
cookies, no analytics and no tracking scripts, and its web fonts are
served from our own server rather than a third party.
1. Who is responsible
Murat Bayraktar is the controller of your data. Contact details are under Contact at the end of this page.
2. Data we process
The list below was compiled from the fields that actually exist in the app's database. It contains no “we may collect” boilerplate.
| Type | What is stored | Why |
|---|---|---|
| Account | Email address, username, display name, date of birth and an age-verification record. Your password is never stored in plain text, only as an argon2id hash. | Creating your account and signing you in. |
| Profile | Bio, location, website, pronoun, avatar and banner images, theme and language preferences, whether your profile is private. | Building your profile and applying your preferences. |
| Sign in with Apple / Google | The user identifier the provider issues for you. If you use Sign in with Apple we also store an Apple refresh token, used solely to revoke the Apple link when you delete your account. | Passwordless sign-in, and clean revocation on deletion. |
| Sessions | A hash of the refresh token, the client identifier (user-agent), the IP address, and the times the session was created, expires or was revoked. | Keeping you signed in, listing your active sessions, and spotting suspicious sign-ins. |
| Collection and content | Your collection entries (item, pressing, condition, quantity, how you acquired it, price notes, your own notes), diary entries, ratings, reviews, tags, shelves, favourites, wishlist, comments, likes, follow and block relationships, and any reports you file. | The core function of the app. |
| Messages | The text of your direct messages with other users, and any attachments. | The messaging feature. |
| Images |
Avatars, banners and item photos you upload are stored on
Cloudflare R2 and served from cdn.mintboxd.com.
Those URLs are hard to guess but public:
anyone who has the URL can open the image without signing in.
|
Displaying your images in the app. |
| Notifications | If you allow notifications, your device's Apple or Firebase push token and its platform. Your notification preferences (follows, social, messages) are stored separately. | Sending push notifications. |
| Usage | Which item pages you open, and the search queries you type in the app together with the number of results. On builds where Firebase Analytics is configured, Google also receives a pseudonymous app-instance identifier, app/device metadata, approximate region, sessions and fixed product interaction events. We do not send account identifiers, email addresses, content titles, message bodies or search text to Firebase. | Improving search and recommendations, and producing popular and trending lists. |
| Error reports | Server and mobile app failures may send the error type, stack trace, app/OS/device version and a minimized diagnostic trail to Sentry. Query strings, cookies, authorization headers and account identity are stripped or disabled. | Finding and fixing bugs. |
| Audit | Moderation actions are recorded with the actor, the target and the before and after state. | Making abuse handling accountable. |
Legal basis (GDPR)
If you are in the European Economic Area, our legal bases under Article 6 GDPR are:
- Contract performance — account, profile, collection, content, sessions and messages (necessary to provide the service you signed up for).
- Legitimate interest — usage analytics, error reports, moderation audit logs and security measures (keeping the service running, safe and improving it).
- Consent — push notifications (you can revoke this at any time in your device Settings or in the app).
- Legal obligation — where a law or valid authority request compels disclosure.
3. What we do not collect
As of the date of this text, the app does not ask for or store:
- payment or card details (there is no selling or payment in the app);
- shipping or home addresses;
- device location (GPS). The location field on your profile is free text you type yourself (e.g. a city name) — we never read your device's GPS or precise location.
What the camera is used for. The app opens the camera only when you start one of these. There are five uses, and whether the image leaves your device differs for each:
- Barcode scanning — on-device only; the frames never leave your device.
- Case measurement — on-device only; nothing but the measurements (in mm) is saved.
- Visual search — the text on the cover is read on your device (Apple Vision); only the resulting TEXT is sent to search. The photo itself never leaves your device.
- Taking a photo in chat — if you choose to send it, the photo is uploaded to our server and delivered to the other person. If you do not send it, it never leaves your device.
- Capturing case faces to build a 3D model — these images are stored and/or processed; see Who we share with and the AI image processing section.
- your contacts, calendar, or your whole photo library (only the image you pick is uploaded);
- advertising identifiers. Advertising-ID collection and advertising-personalization signals are explicitly disabled;
- advertising or marketing trackers such as the Meta pixel. The limited Firebase product analytics described above is not used for ads.
4. Who we share it with
Other users
Mintboxd is a social app. Unless you make your profile private, your profile, collection entries, reviews, shelves and activity are visible to other users. Your messages are visible only to the person you are writing to.
Service providers
- Railway
- Application server and database hosting.
- Cloudflare (R2 + CDN)
- Image storage and delivery.
- Apple / Google
- Authentication if you use Sign in with Apple or Google, push delivery through APNs or Firebase Cloud Messaging, and the limited product analytics described above.
- Sentry
- Minimized server and mobile app error reporting.
- Discogs / TMDB / MusicBrainz
- When you search for an item, your query is sent to the relevant catalogue API (Discogs for music, TMDB for film). These providers receive the search query and your server's IP address.
These providers may host data outside your country, which involves an international transfer. Where the destination country does not have an adequacy decision, we rely on the provider's standard contractual clauses (SCCs) or equivalent safeguards. We do not sell or rent your data for advertising.
We may also have to disclose data where a law or a valid request from a competent authority requires it.
5. How long we keep it
- Account and content data is kept for as long as your account exists.
- Sessions are invalidated when they expire or when you sign out.
- When you delete your account, the process described under Your rights applies.
6. Your rights and deleting your account
You have the right to access, correct, delete and port your personal data, to restrict or object to its processing, and to lodge a complaint with a data-protection authority. You also have the right not to be subject to solely automated decision-making. Most of your profile data you can edit directly in the app; for anything else, contact us.
Deleting your account in the app
You can delete your account from Settings → Account → Delete account. Deletion asks you to re-authenticate with your password or your Apple/Google sign-in. Once you confirm, in order:
- If you used Sign in with Apple, the Apple grant is revoked.
- All of your sessions are revoked.
- Your device's push tokens are deleted and notifications stop.
- Your user record is deleted from the database. Email, username, display name, bio, avatar, banner, location, website, pronoun, date of birth, password hash and Apple/Google links are gone.
- The content you created is deleted: collection entries and their history, reviews, comments, lists, shelves, 3D scans, likes, follows, notifications, search and view history and the messages you sent.
- Images you uploaded are removed from our content network as well: avatar, banner, photos you sent in chat, and 3D box faces.
- Your session records and push tokens are deleted.
Two things are not deleted, both deliberately. First, other people's data: the messages they sent you and the conversation itself remain, because they belong to that person. Second, records that stay with the link to you severed: catalogue contributions (tags, buy links), moderation decisions and report records. These can no longer be associated with you.
Deletion is immediate and permanent. There is no waiting period and it cannot be undone.
California residents (CCPA)
We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act. You have the right to know what data we hold, to request its deletion, and not to be discriminated against for exercising these rights. To make a request, contact us at the address below.
7. Security
Passwords are stored as argon2id hashes. All traffic between the app and the server runs over HTTPS. No system is perfectly secure; if you find a vulnerability, please let us know.
8. Children
Mintboxd is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will remove it.
9. Catalogue data and third-party sources
Release metadata and cover art in the app are compiled from open data sources: TMDB, Discogs, MusicBrainz / Cover Art Archive, Open Library, MobyGames / IGDB. That data is not your personal data; the catalogue is shared by everyone.
This product uses the TMDB API but is not endorsed or certified by TMDB.
10. Changes to this policy
If we update this policy we will change the “last updated” date above, and we will notify you in the app for any significant change.
11. Contact
For questions and data requests: [email protected]