Privacy Policy

Last updated: 5 September 2026

1. Introduction

Vaultr (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use the Vaultr website and the Vaultr iOS app (together, the “Service”).

By using the Service you confirm that you have read and agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information we collect

Account information: email address, display name and password when you create a Vaultr account.
Profile information: optional details such as gaming preferences and favourite platforms.
User content: your game collection data — titles, platforms, notes and images you upload. If you set a profile picture, we store that image on our servers until you change or remove it.
Usage data: how you interact with the Service, access times and features used.
Device information: IP address, browser type and operating system, recorded when you use the website or when the app calls our servers. The iOS app collects no advertising identifier and no device identifier.

The website also uses cookies and similar technologies:

Essential: required for core operation, such as keeping you signed in.
Analytical: help us understand usage patterns through Google Analytics.
Functionality: remember your preferences and settings.
Targeting: deliver relevant content and recommendations.

The Vaultr iOS app contains no analytics or tracking of any kind.

3. How we use your information

Provide, maintain and improve the Service.
Power AI image recognition for game identification. A shelf photo you scan is sent to OpenAI so its vision model can read the game titles. We do not store the photo — it is discarded once the scan returns, and only the identified titles are saved to your collection.
Create a pixel-art profile picture. If you use that feature, the photo you choose is sent to OpenAI's image model, which returns the pixel-art version. We do not keep the original photo; we keep only the avatar you choose to save.
Process transactions for premium features.
Send technical notices, updates and security alerts.
Personalise your collection experience.
Detect, prevent and address technical issues.

4. Legal basis for processing

Under the GDPR we rely on these legal bases:

Performance of a contract: processing needed to provide the Service.
Legitimate interests: improving and marketing the Service.
Consent: processing based on your explicit consent.
Legal obligation: compliance with legal requirements.

5. Data retention

We keep your personal data only as long as necessary for the purposes it was collected for, including legal, accounting or reporting requirements.

When the data is no longer needed we securely delete or anonymise it.

6. How we share data

We share data with the following third parties:

OpenAI: receives the shelf photos you scan, so its vision model can read the game titles, and any photo you turn into a pixel-art profile picture. No other personal data is sent, and we do not store either photo.
Convex: hosts our database and backend, and therefore stores your account and collection data.
IGDB (Twitch): supplies game artwork and metadata. We send search terms only, never your identity.
Stripe: processes payments made on the website.
Apple: processes in-app purchases in the iOS app. We never see your card details.
Resend: delivers our transactional email, such as password resets and support replies.
Google Analytics (website only): measures traffic on vaultr.app.
Affiliates: related companies under common ownership.
Business transfers: in a merger or acquisition.
Legal requirements: when required by law.

We do not sell your personal data.

7. Your rights

Under the GDPR you have these rights:

Access: request a copy of your data.
Rectification: correct inaccurate data.
Erasure: request deletion of your data.
Portability: receive your data in a machine-readable format.
Restriction: limit how we process your data.
Objection: object to certain processing.

To exercise these rights, contact us at contact@vaultr.app. We respond within 3–5 business days.

8. Data security

We protect your data with enterprise-grade security, including encryption, firewalls and strict access controls.

However, no transmission method is 100% secure. While we use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9. International transfers

Your data may be transferred to and processed in countries other than the one you live in. When we transfer data internationally we put appropriate safeguards in place to protect it.

10. Children's privacy

The Service is not directed to anyone under 16. We do not knowingly collect data from children under 16. If you believe your child has given us personal data, contact us and we will remove it.

11. Policy updates

We may update this Privacy Policy from time to time. Changes take effect when they are posted on this page. Please check back regularly.

12. Contact us

Questions about this Privacy Policy? Email us at contact@vaultr.app.

13. Complaints

If you are unhappy with how we have handled your data, you may lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns first.