Collectshare Privacy Policy

Effective date: October 27, 2026
Last updated: October 30, 2026

1. Introduction

Collectshare ("we", "us", "our", "the Service") is a place to keep songs, links, photos, thoughts and things you tried, as dated entries, public or private. This policy explains what personal data we collect, how we use it, and what rights you have under applicable privacy laws, including the California Consumer Privacy Act (CCPA).

We collect only what we need to run the Service.

2. Data controller and contact

Data controller: Collectshare. Operator: Kingsley.
Email: privacy@collectshare.com
Location: United States (California)

3. What personal data we collect

3.1 Data you provide

Account registration: email address, password (hashed), handle, optional bio.
Entries and content: text, images or media you post, stored with your account.
Communications: messages you send to support, feedback or inquiries.
Reserve form: your email address, for launch updates.

3.2 Data collected automatically

Usage data: pages visited, entries created, interactions such as flags, shares and deletions.
Device information: device type, operating system, browser type, IP address.
Cookies: essential cookies only, for sign-in and sessions. We do not use tracking or advertising cookies.

3.3 Data from service providers

Supabase (database and authentication): logs of authentication and database activity, for security and performance.
Loops: your email address, used for sign-in, confirmation and password-reset emails, and the email address you give in the Reserve form, used for launch updates.

4. Legal basis for processing

Consent: for any marketing email and any non-essential cookies. You can withdraw consent at any time.
Contract: email, handle and password are needed to create an account and use the Service.
Legitimate interest: IP address and usage data, for security, fraud prevention and improving the Service.
Legal obligation: where the law requires us to disclose data.

5. How we use your data

We use your data to run the Service, communicate with you about your account, improve the platform, enforce our Terms, prevent abuse and meet legal obligations.

We do not sell your personal data. We do not use it for targeted advertising. We do not share it with unrelated third parties without your consent. We do not use automated decision-making or profiling.

5.1 Who can see your entries

Each entry has its own link. Anyone with that link can open the entry, along with your handle and its share image. This is on by default. You can turn it off in Settings under Public entry links. Once it is off, only you can open your entry links, and anyone else sees a not-found page. Turning it off takes effect within a minute. A preview already shown in another app, such as a message thread, may keep what it fetched.

6. Data retention

Account data: deleted right away when you delete your account.
Entries: when you delete your account, entries that were public are anonymized: the handle, photos and voice notes are removed, and the text, tags and timestamps stay in the public log. Entries that were never public, because Public entry links was off, and entries that only held media are deleted.
Reports: when an entry is flagged, the report and a copy of the entry's text are kept for 1 year and then deleted.
Email and authentication data: kept as long as needed for account recovery and security.
Usage logs: kept for 30 days. Aggregated analytics may be kept longer.

7. International transfers

Collectshare operates in the United States. Your data is processed and stored on servers in the United States.

8. Your rights

You can ask to access, correct or delete your personal data, or object to how we use it.

If you are in California, you have the right to know what personal information we collect, use or share, to delete it with some exceptions, and to opt out of its sale or sharing. We do not sell or share personal information.

To use any of these rights, email privacy@collectshare.com with "Data request" in the subject line. We aim to respond within 30 days.

9. Processors

We use these processors under data processing agreements:

Supabase: database, authentication and storage.
Vercel: hosting and deployment.
Loops: sign-in, confirmation and password-reset emails, and the email list behind the Reserve form.

They may process data only on our behalf and must keep it secure.

10. Content moderation

Notice and action: you can flag any entry. We review flagged entries and remove those that break our Terms or the law.
Acknowledgment: we confirm receipt of reports within a reasonable time.
Appeals: if we remove your entry or suspend your account, you can appeal by emailing moderation@collectshare.com.
Rules: the prohibited content list is in our Terms.

11. Security

All traffic uses HTTPS with TLS.
Passwords are hashed and never stored in plain text.
Only authorized people can access personal data.
We review security regularly.

No system is perfect. If a breach affects your data, we will tell you and the relevant authorities as the law requires.