Privacy Policy

Last updated: May 30, 2026

Collector's Box ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

1.1 Information You Provide

Account information: Full name, username, email address, phone number, password.
Profile information: Profile image, collection preferences.
Address information: Street address, city, state, ZIP code, country (used for marketplace shipping).
Date of birth: Month and year (used for age verification and COPPA compliance).
Payment information: Processed securely through Stripe; we do not store credit card numbers.
Collection data: Items, photos, descriptions, and values you add to your collection.
Communications: Chat messages, feedback submissions, marketplace questions.

1.2 Information Collected Automatically

Usage data: Pages visited, features used, time spent on platform.
Device information: Browser type, operating system, IP address.
Cookies: Session cookies for authentication, preference cookies for settings.

2. How We Use Your Information

To provide, maintain, and improve the Collector's Box platform.
To process transactions and manage your subscription.
To verify your identity and age eligibility.
To facilitate marketplace transactions and shipping between buyers and sellers.
To moderate content and enforce our Terms of Service.
To detect and prevent fraud, abuse, and security threats.
To communicate with you about your account, updates, and support requests.
To comply with legal obligations and respond to legal processes.

3. Information Sharing

We do NOT sell your personal information. We may share information in the following circumstances:

Marketplace transactions: Shipping name and address are shared with sellers solely for order fulfillment.
Service providers: We use third-party services (Stripe for payments, remove.bg for image processing, OpenAI for AI features) that process data on our behalf under strict contractual obligations.
Legal requirements: We may disclose information when required by law, court order, or to protect the rights, property, or safety of Collector's Box or its users.
Safety: We may share information with law enforcement when we believe there is an imminent threat to safety, particularly involving minors.

4. Data Security

All data is transmitted over encrypted HTTPS connections.
Passwords are hashed using industry-standard algorithms (bcrypt).
Payment processing is handled entirely by Stripe (PCI-DSS compliant).
Access to user data is restricted to authorized personnel only.
We regularly review and update our security practices.

While we implement reasonable security measures, no system is 100% secure. You are responsible for keeping your account credentials confidential.

5. Children's Privacy (COPPA Compliance)

Collector's Box does not knowingly collect personal information from children under the age of 13. If we discover that a user is under 13, we will immediately terminate their account and delete their data. If you believe a child under 13 has created an account, please contact us at [email protected].

6. Your Rights

You have the right to:

Access your personal data stored on our platform.
Correct inaccurate information via your Preferences page.
Delete your account and associated data by contacting support.
Export your collection data via the CSV export feature.
Withdraw consent for optional data processing at any time.

7. Data Retention

Active account data is retained for the duration of your subscription.
After account deletion, data is permanently removed within 30 days.
Transaction records may be retained for up to 7 years for legal and tax compliance.
Chat moderation logs are retained for 1 year for safety purposes.

8. Cookies

We use essential cookies for:

Session management and authentication
CSRF protection
Remembering login preferences

We do not use third-party advertising or tracking cookies.

9. Third-Party Services

Our platform integrates with the following services, each governed by their own privacy policies:

Stripe — Payment processing
Google — OAuth sign-in, reCAPTCHA
OpenAI — AI-powered search and item identification
remove.bg — Image background removal

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or platform notification. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

For privacy-related questions, data requests, or concerns, contact us at:

Email: [email protected]