Privacy

MiniVault is a free hobby project. This page explains, in plain English, what it stores and why. Last updated 24 October 2026.

What we store

• Your email address and, if you sign in with Google or Discord, your name and profile picture from that account.
• What you add: units, projects, stages, notes, tags, prices and dates you choose to enter, plus your paints, recipes, goals and painting time.
• Photos you upload. Location and other metadata are removed in your browser before upload.
• A history of stage changes, used for your timeline and statistics.

What we don’t do

• No adverts, no selling your data, no third-party tracking cookies.
• Your collection is private by default. Nobody else can see it unless you share it.

What you can choose to share

• Public projects. If you pick a public handle and make a project public, anyone with the link can see that project’s name, description, target date, its owned units with their progress and cover photos, and your handle and display name. Your email, notes, prices, tags, wishlist and other projects stay private. You can make a project private again at any time.
• Barcodes. When you name a barcode that nobody has added yet, the kit name, model count, game and faction you enter are shared with other users so their scans fill in automatically. Your name is never shown with it. If you delete your account, these entries stay but are no longer linked to you.

Where it lives

Data is stored with Supabase (database, sign-in and photo storage) and the site is hosted on Vercel. Sign-in emails are sent by our email provider, Resend. If you sign in with Google or Discord, they confirm who you are; we don’t get access to anything else in those accounts.

Your rights

You can download all your data (CSV or JSON) and permanently delete your account at any time from Settings. Deleting your account removes your data and photos.

Cookies

We use only the cookies needed to keep you signed in, plus a local setting for your theme.