Privacy policy

Last updated November 7, 2026

Collector is run by Rec-Safe (RECSAFE), a Washington corporation ("we" and "us"). This policy says what Collector keeps about you, why, who else sees it, and what you can do about it. It covers Collector only; our other sites and apps have their own.

What we keep

When you use Collector, we keep:

• your email address, your name, your time zone, your collections' currency and country, your reminder settings, and the note you leave for your heirs
• each collection's name, description, fields, groups, and naming pattern, and whether its showcase is on
• each piece's details: the values of its collection's fields (private fields encrypted); its name, group, tags, and notes; how many; where it's kept (its place's name and its exact spot, both encrypted); when and how you got it, from whom, and what you paid; its values over time; and, once it's gone, when, for what, how, and to whom (encrypted)
• the photos and papers you upload (encrypted)
• your checklists, want list, places, sources (shops, shows, sellers), and dates to keep
• the people you share your collections with, and their invitations
• a sign-in log (the time, IP address, and browser), to keep accounts safe

You sign in with a one-time link emailed to you, or a passkey.

Photos and papers are encrypted before they're stored, with a key for your account, and are sent only to you and the people you share with (and a collection's photos to anyone with its showcase's link, while it's on). Photos are re-saved first, which removes the location and other camera details saved in them. A spreadsheet you import is kept encrypted until the import, then deleted.

Like any website, our servers also keep a short log of the pages asked for (with the IP address, the browser, and the time), to keep the site running and safe. We don't use analytics, advertising, or tracking services.

Why we keep it

Only to run Collector for you: to keep your collections' records and work out their totals, to send sign-in links, invitations, and the reminders you ask for, to show a collection's showcase when you turn it on, and to keep Collector working and secure. We don't sell or rent your information, we don't show ads, and we don't use it for anything else.

Who else sees it

Nothing in your collections is public unless you turn on a collection's showcase: a page anyone with its link can open, showing what's in that collection (here or for sale), with its photos and the fields you choose, and never what anything cost or is worth, where it's kept, private fields, notes, tags, papers, or your email address. Search engines are asked not to list it, and you can turn it off or change its link at any time. Private fields, where things are kept, who they went to, and every photo and paper are encrypted where they're stored, with a key for each account. The people who run Collector don't look at collections. Reminder emails name dates, never what you keep. Everything is stored on servers in the United States.

We use these services to run Collector, and each sees only what it needs:

• Amazon Web Services, which hosts our servers in the United States, where everything the app keeps is stored
• Postmark, which sends our emails, so it handles your email address and the message

We'd share information if the law makes us (a court order, for example), or to protect someone's safety. If Rec-Safe ever handed Collector to someone else, this policy would go with it.

Cookies

Collector uses cookies to keep you signed in (for up to 60 days) and to remember whether you like a collection shown as pictures or as a table. They aren't used for advertising or tracking.

How long we keep it, and deleting it

We keep your information while you use Collector. You can delete any piece, photo, paper, field, group, checklist, or collection, download everything, and delete your account, which deletes your collections with everything in them and we'll do it, apart from anything the law makes us keep (such as payment records). Server logs are kept only as long as they're needed to run and protect the site, and backups are overwritten in time.

Keeping it safe

Every page uses an encrypted connection (HTTPS). Sign-in links work once and expire, passkeys can't be guessed or phished, and private fields, storage places, buyers, and every photo and paper are encrypted at rest with a key for each account. No website is perfectly secure, but if something ever goes wrong in a way that puts your information at real risk, we'll tell you, and the authorities when the law requires it.

Children

Collector isn't meant for children under 13, and we don't knowingly keep a child's information. If you think a child has given us theirs, email us and we'll delete it.

Your choices and rights

You can ask us what we keep about you, ask us to correct it, or ask us to delete it, by emailing info@rec-safe.com. We'll answer within 30 days. Depending on where you live (for example in Canada, a US state such as Washington or California, the UK, or the EU), the law may give you more rights, and we honour them for everyone.

Our servers are in the United States, so if you're elsewhere, your information is stored and handled there, under US law. In Canada, if you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Changes and questions

If we change this policy, we'll change the date at the top, and if a change is big, we'll say so on Collector first. Questions? Email info@rec-safe.com.