ARVIO

Privacy Policy

Last updated: 29 July 2026

ARVIO is a personal‑collection catalogue. This policy is written plainly because the honest version is short: we store what your account needs to work, and nothing we don’t. It is not legal advice — it describes what the app actually does.

What we store

  • Your account. Your email address and a password hash, held by Supabase Auth — we never see or store your raw password.
  • Your collection. The items you add (titles, formats, barcodes, release years, cover‑art links, ratings, watched flags, notes, and any loan details you type in, including a borrower’s name) and the folders you organise them into.
  • On your device only. Small display preferences (default view and sort) live in your browser’s local storage — they never reach our servers.

We do not run third‑party analytics or advertising trackers, and we keep no marketing profile on you.

Who processes your data

ARVIO relies on a few service providers to run. They act on our behalf and only handle what their job requires:

  • Supabase — hosts the database that holds your collection, and runs authentication (your email + password hash, sessions).
  • Vercel — hosts and serves the application.
  • Upstash — stores rate‑limit counters keyed to your account id (a random identifier). No collection content or personal details are sent there.
  • Cloudflare Turnstile — a bot check shown on the login page; Cloudflare sees the challenge interaction, not your collection.

Metadata lookups

When you scan a barcode or search for a title, ARVIO sends only that barcode or title text to the metadata providers — TMDB, Discogs, and UPCitemdb (with Apple’s iTunes Search API as a keyless fallback). Your identity — email, name, or account id — is never included in these requests. See Attribution for who these providers are.

Cover images are served from TMDB and Discogs. When your browser displays a cover, those services may see your IP address — the same as for any image embedded from another site.

Your choices

  • Export. Download your entire collection at any time from Settings → Data, as CSV or JSON.
  • Correct. Every item, folder, and your display name are editable from the app.
  • Delete. Permanently delete your account and all your collection data at any time from Settings → Account → Danger zone.

Retention & changes

We keep your data for as long as your account exists; deleting your account removes it. If this policy changes, the “last updated” date above changes with it — material changes will be noted in the app.