Vaulted

Privacy Policy

Last updated: January 28, 2026. Your privacy is at the core of Vaulted. We built this app to help you curate your legacy, not to exploit your data.

Our Commitment

**We do not sell your personal data.** Vaulted is a tool for collectors and curators. We make money by providing value to you, not by selling your information to third-party advertisers or data brokers.

Information We Collect

When you use Vaulted, we collect information necessary to provide the service:

  • Account Information: Your name, email address, and profile picture (if provided via Google OAuth).
  • User Content: The titles, descriptions, and ranks of the items you add to your lists.
  • Usage Data: Basic interaction data (via PostHog) to help us understand which features are most useful and to improve the app.

How Your Data is Secured

Your data is stored securely using industry-standard encryption on Google Cloud Platform. We use secure OAuth 2.0 protocols for authentication, meaning we never see or store your Google password.

Sharing Data

The only time your data is shared is when **you** explicitly choose to share it—such as when you send a "Share" link for a list or item to a friend. We do not share your private lists or account details with anyone.

Your Rights & Data Deletion

You have full control over your data. In accordance with GDPR and CCPA guidelines, you have the right to access, correct, or delete your personal information.

Permanent Account Deletion

You can permanently delete your account at any time through your Settings page.

  • Deletion is permanent and cannot be undone.
  • All your lists, items, and shares will be immediately scrubbed from our active databases.
  • All authentication tokens and session data will be invalidated and removed.
  • Associated third-party metadata (like your Google profile link) will be disconnected and deleted.

Compliance & Global Rights

GDPR (General Data Protection Regulation): For users in the EU/EEA, Vaulted acts as a Data Controller. You have the right to data portability, the right to be forgotten, and the right to object to processing.

CCPA (California Consumer Privacy Act): We do not sell your personal information. California residents have the right to request disclosure of data collection and the right to delete their data.

Data Retention: We retain your data as long as your account is active. If you delete your account, data is scrubbed immediately. Inactive accounts with no login for 24 months may be subject to deletion after email notification.

Questions about your privacy?

privacy@vaultedfaves.com