Privacy Policy

Account data: email address, display name, username, optional avatar and profile text.

Content you create: archive records (films, shows, games, books, music, places, collectibles), custom lists, ratings, notes, likes, friendships and messages.

Usage data: basic technical logs (IP address, user agent, timestamps) needed to serve requests, prevent abuse and debug errors.

Supabase (database, authentication, file storage), Cloudflare (hosting, CDN, network security), Google (sign-in with Google, and Places data/photos when you add a place). Metadata providers such as TMDB, RAWG, Open Library and MusicBrainz receive only the search text needed to look up an item.

ArcStow does not use advertising or tracking cookies. Your login session and interface preferences are stored in your browser's localStorage. Clearing browser storage signs you out.

ArcStow measures traffic with its own first-party analytics — there is no Google Analytics and no third-party tracker. We record the page path, an anonymous 30-minute session identifier stored in a cookie, the interface language, whether the device is mobile or desktop, the referring website's domain (only when you arrive from another site), campaign parameters when a link carries them, and roughly how long a page was open. We do not store IP addresses and we never sell or share this data. Raw events are deleted after 90 days; only aggregated daily counts are kept longer.

Every record and list has a visibility setting: public, friends-only or private. Only public content can be viewed by others or indexed by search engines. Private and friends-only content is enforced at the database level, not just hidden in the interface.

Under the GDPR and KVKK you may access, correct, export or delete your data, object to processing, and withdraw consent. You can export your archive and delete your account from the app settings at any time; deletion permanently removes your profile, records, lists, uploads and messages.

For any request, contact hello@arcstow.com.