MyCollectory (beta) — We are working hard on MyCollectory, feel free to register!
Sign in Sign up
Page

Privacy Policy

What MyCollectory stores about you, why, and the controls you have.

This policy explains what data MyCollectory collects, how we use it, who we share it with (spoiler: no one, commercially), and the rights you have under the EU General Data Protection Regulation (GDPR) and equivalent legislation. It applies to everyone using mycollectory.com and related services operated by Aivion Studios.

1. Who we are

MyCollectory is operated by Aivion Studios, based in the Netherlands. For any privacy question or request, you can reach us at hello@aivionstudios.com.

2. What data we collect

Account data

  • Your display name and chosen username.
  • Your email address, used for sign-in, password resets and (optional) email notifications.
  • A hashed password — we never store or have access to the plain-text password.
  • Optional profile details that you choose to add (avatar, biography, social links).

Activity data

  • Titles you mark as watched, played, rated or added to a list.
  • Lists and bulletins you create, including their privacy setting.
  • Follows, friend requests and likes on bulletins.
  • Requests you submit through "Request a title".

Technical data

  • Standard web-server logs (IP address, user agent, requested URL, timestamp) kept for security and abuse mitigation. These rotate out automatically.
  • A session cookie used to keep you signed in.
  • A small cookies_ack flag in your browser's localStorage so we don't show the cookie banner every visit.

3. Why we use it

We process your data on the following legal bases:

  • Contract — to provide the service you signed up for (sign-in, lists, watch history, sharing).
  • Legitimate interest — to keep the service secure, prevent abuse, and improve features based on aggregate, non-personal usage trends.
  • Consent — for optional features such as embedded YouTube trailers loading on first visit. You can withdraw consent at any time.

We do not profile you for advertising, sell data to third parties, or share your activity with marketing networks.

4. Cookies and embedded content

MyCollectory itself uses one functional cookie (your sign-in session) and one localStorage key (cookie banner acknowledgement). Neither is used for tracking.

We embed trailers and video clips from YouTube. When such a video loads, YouTube may set its own cookies for playback, statistics and (if you have a Google account) personalisation. YouTube acts as an independent controller for that data — we cannot inspect or delete it. Their policy: policies.google.com/privacy.

Catalog images are served from image.tmdb.org and images.igdb.com. These are static asset CDNs and do not set tracking cookies.

5. Sharing and third parties

We share personal data only with infrastructure providers strictly necessary to run the service: our hosting platform (compute, database, storage) and our transactional-email provider. All of them act as processors under written agreements that forbid using your data for their own purposes.

We will disclose information when required by a valid Dutch or EU legal order. If that ever happens to you specifically and the law permits, we will let you know.

6. Retention

Account data is kept as long as your account is active. When you delete your account through Account & security, your profile, history and lists are removed within 30 days. Web-server logs are retained for up to 90 days for security purposes.

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data — most fields are editable directly in your profile.
  • Delete your account and associated data.
  • Export your watch history and lists.
  • Object to processing or restrict it.
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these, email hello@aivionstudios.com. We will respond within 30 days.

8. Children

MyCollectory is not directed at children under 13. We do not knowingly collect data from anyone under that age. If you believe a child has created an account, please contact us and we will remove it.

9. Changes

If we materially change this policy, we will announce it via a bulletin and update the "Last updated" date at the bottom of this page. Continued use of the service after such a change constitutes acceptance.