ARVIO

Privacy Policy

Last updated: 9 October 2026

ARVIO is a catalogue for a personal collection. This page lists what it stores and who handles it.

What ARVIO stores

  • Your account. Your email address and a password hash, held by Supabase Auth. We never see or store your raw password.
  • Your collection. The items you add (titles, formats, barcodes, release years, cover‑art links, ratings, watched flags, notes, and the name of anyone you note as having borrowed an item) and the folders you organise them into.
  • On your device only. Small display preferences (default view, sort and hidden formats) live in your browser’s local storage, and never reach our servers.

We do not run third‑party analytics or advertising trackers, and we keep no marketing profile on you.

Who processes your data

ARVIO relies on a few service providers to run. They act on our behalf and only handle what their job requires:

  • Supabase: hosts the database that holds your collection, and runs authentication (your email address and password hash, and sessions).
  • Vercel: hosts and serves the application.
  • Upstash: stores rate‑limit counters keyed to your account id (a random identifier). No collection content or personal details are sent there.
  • Cloudflare Turnstile: a bot check shown on the login page. Cloudflare sees the challenge interaction, not your collection.
  • Sentry: receives a report when a page or request fails. Reports carry no account details.

Metadata lookups

When you scan a barcode or search for a title, ARVIO sends only that barcode or title text to the metadata providers: TMDB, Discogs, and UPCitemdb (with Apple’s iTunes Search API as a keyless fallback). Your identity, whether email, name or account id, is never included in these requests. See Attribution for who these providers are.

When you import from Discogs, ARVIO sends Discogs the username you enter.

Cover images are served from TMDB and Discogs. When your browser displays a cover, those services may see your IP address, the same as for any image embedded from another site.

Your choices

  • Export. Download your entire collection at any time from Settings → Data, as CSV or JSON.
  • Correct. Edit your ratings, notes, lending details, folders and display name in the app. Titles and release years come from the lookup sources, so they can’t be edited.
  • Delete. Permanently delete your account and all your collection data at any time from Settings → Account.

Retention and changes

We keep your data for as long as your account exists; deleting your account removes it. If this policy changes, the “last updated” date above changes with it. Material changes will be noted in the app.