Privacy Policy
Effective Date: October 5, 2026 (previous version: October 1, 2026)

Introduction

Thank you for choosing collecto.rs ("App"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile and web application. Our practices comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) in the European Union (EU) and privacy laws in the United States (US).

By using our App, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

We collect only the information necessary to provide and improve our services. Specifically, we collect:

  • Personal Information: Your name and email address when you register or create an account.
  • Uploaded Content: Images of your collectibles that you voluntarily upload and share within the App.

We do not collect sensitive personal information such as financial data, health information, or location data.

How We Use Your Information

We use your information solely for the following purposes:

  • To create and manage your account.
  • To provide, maintain, and improve our services.
  • To communicate with you regarding your account, updates, or customer support.
  • To facilitate sharing of your uploaded images with other users, as per your preferences.

Sharing Your Information

We do not sell, rent, or trade your personal information. Your information may be shared only in the following circumstances:

  • With Other Users: Images you upload are visible to other users based on your sharing preferences.
  • Service Providers: We may share your information with trusted third-party service providers who assist us in operating our App, provided they agree to keep your information confidential and secure.
  • Legal Compliance: We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users or others.

Cookies and Similar Technologies

Cookies are small files a website stores in your browser, and local storage is a similar place for small bits of data. We use them in four ways. Only the first is needed for collecto.rs to work.

  • Essential: keeping you signed in, remembering your cookie choice, your language and light or dark mode, carrying the collection you picked through sign-up, and Statsig. Statsig is how we turn features on and run experiments: it decides which version of a feature you see, and it measures how our features are used, for us only. It keeps a random ID in your browser's local storage. It is not used for advertising. These are always on.
  • Invite credit: when you open a member's invite link or profile link, or accept an email invitation, remembering which member it came from, so that they are credited when you create your account.
  • Analytics: Google Analytics, so we can see which pages people visit, where they came from and which pages help, in aggregate; and one cookie of our own, collectors_ft, that remembers how you first arrived, so that if you create an account we can see which channels bring people to collecto.rs.
  • Advertising: Google Ads conversion measurement, so we can tell whether our ads bring collectors to collecto.rs. When you allow it from the European Economic Area, the United Kingdom or Switzerland, we tell Google not to use it to personalize ads. Elsewhere, Google may also use it to show our ads to people who have visited collecto.rs; you can turn that off in Cookie settings or in Google's My Ad Center.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask first: Google Analytics and Google Ads do not load, and collectors_ft is not stored, until you say yes, and they stay off if you say no or do not choose. Everywhere else they are on unless you turn them off.

Invite credit waits for you there too: when you open an invite link from the European Economic Area, the United Kingdom or Switzerland, we store nothing. We keep the invite code only once you press Accept invite, which is you asking to join through that member's invite, until your account is checked against it. Everywhere else the invite code is remembered when you open the link. A member's profile link works the same way: there we store nothing when you open it, and remember whose profile it was only once you press a sign-up button on it.

When you create an account, we record how you first arrived (the page you landed on, the website that sent you, any campaign tags in the link and, if advertising is allowed, whether you came from one of our ads) to understand which channels bring people to collecto.rs. In the European Economic Area, the United Kingdom and Switzerland we only do this if you allow analytics cookies. We also note whether you signed up on the website or in our app. No IP address, advertising ID or invite code is stored for this, and it is deleted with your account.

NameProviderPurposeHow long
better-auth.session_token (and related better-auth cookies)collecto.rsEssential. Keeps you signed in.About a week after your last visit, renewed as you use the site (our sign-in library’s default)
collectors.consent.v1 (local storage)collecto.rsEssential. Remembers your cookie choice.Until you change it or clear your browser’s storage
NEXT_LOCALE, theme, collectors-themecollecto.rsEssential. Your language and light or dark mode.Language: 1 year. Theme: until you clear your browser’s storage
collectors_ref, collectors_ref_chcollecto.rsInvite credit. Set when you open a member’s invite link; in the European Economic Area, the United Kingdom and Switzerland, only once you press Accept invite. Remembers their invite code, and how the link was shared (for example by text or a QR code), so that the member who invited you is credited when you create your account. Deleted once your account has been checked against it.30 days, or until you create your account
collectors_invitecollecto.rsInvite credit. Set when you press Accept invite on an email invitation to join. Remembers its invite code, so that the member who invited you is credited even if you sign up with a different email address. Deleted once your account has been checked against it.30 days, or until you create your account
collectors_biocollecto.rsInvite credit. Set when you open the profile link a member shares, for example in their Instagram bio; in the European Economic Area, the United Kingdom and Switzerland, only once you press a sign-up button on their profile. Remembers whose profile you came from and, when we can tell, where the link was shared, so that the member is credited when you create your account. Deleted once your account has been checked against it.7 days, or until you create your account
referralCode, inviteCode, referralChannel (session storage)collecto.rsInvite credit. The same invite code, kept in that browser tab when you press Accept invite, so that it reaches your new account. Deleted once your account has been checked against it.Until you close the tab, or until your account is checked against it
collectors_intentcollecto.rsEssential. Set when you start signing up from one of our explore pages. Remembers which kind of collection that page was about, so it is ready for you after you sign up. Deleted once used.30 minutes
statsig.stable_id.* (local storage)Statsig, for collecto.rsEssential. Decides which version of a feature you see, and measures how our features are used. No advertising.Until you clear your browser’s storage
_ga, _ga_HPZTWR1LDRGoogle AnalyticsAnalytics. Tells visits apart so we can see which pages help.2 years (Google’s default)
collectors_ftcollecto.rsAnalytics. Remembers how you first arrived (the page you landed on, the website that sent you, any campaign tags in the link and, if advertising is allowed, whether you came from one of our ads), so it can be saved with your account if you sign up. Read only by collecto.rs. Not set while you are signed in. If you create an account, it is deleted when you first choose your username.30 days
_gcl_au, _gcl_ls (local storage)Google AdsAdvertising. Measures whether someone who clicked one of our ads went on to use collecto.rs._gcl_au: 90 days (Google’s default). _gcl_ls: until cleared

Changing your mind. Choose (also in the footer of our pages) to see and change your choice at any time. Turning analytics or advertising off stops it and deletes the cookies it set. You can also block or delete cookies in your browser's settings; collecto.rs will still work, though you will be signed out if you delete the sign-in cookies.

Google's use of this data is covered by Google's Privacy Policy, and how Google uses information from sites that use its services. You can also opt out of Google Analytics on every site with Google's opt-out browser add-on, and manage ad personalization in My Ad Center.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations. You may request deletion of your account and associated data at any time. How to delete your account explains the steps, what we delete and what we keep.

Your Rights (EU Users)

If you are located in the European Union, you have certain rights under the GDPR, including:

  • Right of Access: You can request access to your personal information.
  • Right to Rectification: You can request correction of inaccurate or incomplete personal information.
  • Right to Erasure: You can request deletion of your personal information.
  • Right to Restrict Processing: You can request restriction of processing your personal information.
  • Right to Data Portability: You can request transfer of your personal information to another service provider.
  • Right to Object: You can object to the processing of your personal information.

To exercise these rights, please contact us at the contact information provided below.

Children's Privacy

Our App is not intended for use by individuals under the age of 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information promptly.

International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction. We ensure appropriate safeguards are in place to protect your personal information in accordance with applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on our App and updating the "Effective Date" at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: support@collecto.rs
Address: 5753 Enfield Ave, Encino, CA, 91316

Thank you for trusting us with your personal information.