Privacy Policy
Effective October 15, 2026
Rarifolio is a registered sole proprietorship in Alberta, Canada, operating rarifolio.com. This policy explains what personal information we collect, why we use it, who helps us process it, and the choices you have. For privacy questions or requests, contact contact@rarifolio.com.
1. Information you provide
When you create or manage an account, we collect your email address, account identifier, display name, username, sign-in information and any profile photo you provide. We also store the collection and watchlist records you choose to save, including products, quantities, conditions, grades, purchase and sale details, notes, portfolios and folders. Imported collection records are processed to populate your collection. If you contact us, we receive your message and the information you include. Please do not send payment-card details or other sensitive information in collection notes or support messages.
2. Google and Discord sign-in
If you choose Continue with Google, Google provides an account identifier, email address and basic profile information, such as your name and profile photo, subject to the permissions you approve. If you choose Continue with Discord, Discord provides your account identifier, basic profile information and email address through the identify and email permissions. We use this information to authenticate you, create or connect your Rarifolio account, and support your profile. We do not receive your Google or Discord password. Google sign-in does not request access to your Gmail messages, Google Drive files, contacts or calendar; Discord sign-in does not request access to your messages or permission to join servers for you. Each provider processes your use of its sign-in service under its own policy: Google Privacy Policy and Discord Privacy Policy. Password-free email-code sign-in is also available. Choosing one sign-in provider does not authorize us to send your information to another provider.
3. Technical information and browser storage
Our hosting and authentication services process technical information needed to serve and protect the website, such as IP addresses, browser and device information, request URLs, timestamps, errors and security events. We use cookies and browser storage for sessions, secure sign-in, return navigation, interface preferences and temporary state needed by features you use. Blocking or clearing this storage may sign you out or reset preferences. We do not currently use third-party marketing analytics, advertising cookies or behaviour-based advertising. Operational logging for reliability and security is separate from marketing analytics.
4. How we use information
We use personal information to operate accounts; organize collections, watchlists and portfolios; calculate values and charts; provide imports, exports and sharing features; remember preferences; respond to support requests; send account and security messages; prevent abuse; troubleshoot failures; and meet applicable legal obligations. We limit collection and use to purposes reasonably connected to these services. We do not sell your personal information or provide it to advertisers for targeted advertising.
5. Who processes information
We use service providers to operate Rarifolio: Supabase for authentication, database and user-file storage; Cloudflare for website hosting, content delivery, storage and security; Resend for transactional account emails; and Microsoft email services for communications sent to our support mailbox. These providers receive information needed for the services they perform. Catalog artwork served from another website may also cause your browser to contact that website and disclose technical request information. If you follow a link to another service, its own privacy policy applies to information you provide there. We may disclose information when required by law or reasonably necessary to protect rights, investigate abuse or respond to a security incident, subject to applicable law.
6. Your collection and sharing
Your collection records are associated with your account. Public portfolio and sharing features can make the information you choose to publish available to other people. Anyone with an active sharing link may be able to view its permitted content. Review your sharing settings before publishing, and disable sharing when you no longer want access available. Copies or screenshots made by recipients may remain after you revoke access. Sensitive mode hides information on your screen; it does not change sharing permissions.
7. Processing outside Canada
Our service providers use infrastructure and personnel in multiple countries, including the United States. Your information may be stored or processed outside Canada and may be subject to the laws and lawful access requirements of those countries. We use providers and access controls intended to protect information during this processing. You can contact us for information about our use of providers outside Canada and their role in handling your information.
8. Emails and the waitlist
Sign-in codes, account confirmations, security notices and important service or privacy notices support your account. Launch and product-update emails are separate: the waitlist asks for your express agreement to receive them. You can withdraw that agreement by emailing contact@rarifolio.com or using an unsubscribe link when provided. Withdrawing marketing consent does not prevent necessary account or legal notices. The waitlist also uses a date-based hash of your IP address to limit abusive submissions.
9. Retention and deletion
We retain information for as long as reasonably needed to provide your account and the features you use, resolve disputes, protect the service and satisfy legal obligations. You can request account deletion in your account settings or contact us for assistance. Deletion is processed through a cleanup workflow rather than an instant removal from every system. Some information may remain for a limited period in backups, security logs or records we must retain by law. Information retained for those purposes is not used to continue an ordinary deleted account. Export records you want to keep before requesting deletion.
10. Your choices and privacy requests
You can update available account information, manage sign-in and sharing settings, export supported collection records, withdraw optional email consent, or request deletion. Depending on applicable law, you may also request access to personal information we hold about you, correction of inaccurate information, information about its use and disclosure, or withdrawal of consent. Send requests to contact@rarifolio.com. We may verify your identity before acting, and will respond within applicable legal time limits. If we cannot fulfil a request, we will explain the reason, subject to legal restrictions. You may also raise a concern with the privacy regulator responsible for your location.
11. Security
We use measures intended to protect personal information, including encrypted connections, managed authentication, account-based access controls and restricted administrative access. No internet service can guarantee absolute security. Protect your email, Google and Discord accounts, never share sign-in codes, and contact us promptly if you suspect unauthorized access. We assess security incidents and provide notifications when required by applicable law.
12. Younger users
If you are below the age of majority where you live, use Rarifolio with a parent or guardian's permission, as described in our Terms of Service. Where applicable law requires a parent or guardian's consent to process a younger user's personal information, that consent is required. If you believe a child has provided information without the required permission, contact us so we can investigate and take appropriate action.
13. Payments and future features
Rarifolio does not currently collect payment-card details through a subscription checkout. If we introduce paid subscriptions or features that collect additional personal information, we will explain the relevant processing before you use them and update this policy as appropriate. Descriptions of planned scanners, AI tools or other future features do not mean those features currently collect information from you.
14. Changes and contact
We may update this policy as the service develops. We will publish the revised policy with its effective date. For material changes affecting how we handle personal information, we will notify existing account holders by email and seek additional consent where required by law before applying a new use. For questions, requests or complaints, email contact@rarifolio.com and address your message to Rarifolio's privacy contact.