Privacy Policy
1. Who we are
RetroShelf is a personal collection management application. This policy explains what data is collected when you use the service.
2. Data we collect
- Account data — email address, display name, hashed password. Required to create and access your account.
- Collection data — items, categories, tags, photos and other content you add. Stored to provide the service.
- Analytics data — anonymous usage data collected by Google Analytics (only with your consent). Includes pages visited, session duration, and browser/device type. No personally identifiable information is sent to Google.
- Contact messages — name, email and message text submitted via the contact form. Used only to respond to your inquiry.
3. Cookies
We use essential and functional cookies. Analytics cookies are only set with your explicit consent.
| Cookie | Purpose | Type |
|---|---|---|
| session | Keeps you signed in | Essential |
| lang | Remembers your language preference | Functional |
| currency | Remembers your currency preference | Functional |
| cookie_consent | Remembers your cookie choice (localStorage) | Functional |
| _ga, _ga_* | Google Analytics — distinguishes users and sessions | Analytics |
4. Google Analytics
With your consent, we use Google Analytics 4 to understand how visitors use the site. Google Analytics sets cookies (_ga, _ga_*) that persist for up to 2 years.
Data is processed by Google LLC and may be transferred to the United States. Google's privacy policy: policies.google.com/privacy.
5. Cloudflare Turnstile (CAPTCHA)
We use Cloudflare Turnstile on the registration, login, and contact forms to protect against automated abuse. When you submit these forms, Turnstile may collect technical data including your IP address, user agent, and behavioural signals to distinguish humans from bots.
This data is processed by Cloudflare, Inc. (USA) under their privacy policy: cloudflare.com/privacypolicy. Cloudflare Turnstile is designed to work without tracking cookies or persistent identifiers.
6. Data sharing
We do not sell or trade your personal data. Your collection is private by default. You may optionally share a read-only link to your collection or wishlist. Analytics data is shared with Google only with your consent. CAPTCHA verification data is processed by Cloudflare as described above.
7. Data retention
Your data is stored as long as your account exists. You may request deletion at any time via the contact form.
8. Your rights (GDPR)
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent for analytics cookies at any time
To withdraw analytics consent, click "Change" in the Cookies section above. To exercise other rights, use the contact form.
9. Contact
For privacy-related questions, please use the contact form.
Last updated: April 2026