Privacy Policy

Effective date: August 21, 2026

This policy explains what information Sandbox Labs, LLC ("we," "us") collects when you use the Loredeck app and loredeckapp.com (the "Service"), how we use it, and the choices you have. The short version: we collect what's needed to run a media-tracking app with social features, we don't sell your data, you can delete everything from inside the app, and you can ask us for a copy of it at any time.

1. Information we collect

Information you provide

• Account details — email address, username, display name, and password (stored as a salted hash; we never see the plain text). If you sign in with Google, we receive your email and basic profile info from Google instead.
• Profile — optional avatar, bio, profile tags, and media-interest preferences.
• Activity and content — the media you track; your statuses, ratings, reviews, watch/read logs, goals, collections, posts, comments, reactions, club memberships and discussions, and custom themes.
• Support messages — reports you send through Contact Us, delivered to our support inbox with a copy to your email.
• Launch notification list — if you enter your email on loredeckapp.com to be told when Loredeck is generally available, we store that address (plus the date and a one-way hash of your IP address, used only to stop bulk abuse of the form). It is used solely to send you a confirmation and a single launch announcement, and never shared. Every one of those emails carries an unsubscribe link; unsubscribing stops all further mail, and you can ask us to delete the address entirely at support@loredeckapp.com.
• Early access application — if you apply to be an early tester on loredeckapp.com, we store your email address and your answers: which media you track, what tools you use today, whether you'd connect those accounts, roughly how large your library is, which phone you'd test on, how likely you are to report problems, and any optional comment you write. We use this only to decide who to invite and to send you an invite; it is never sold or shared, and it is not used for advertising. If you also tick the release-notification box, your address is added to that list as described above. To withdraw an application or have the answers deleted, email support@loredeckapp.com.

Information from connected services (optional)

If you choose to connect an external account, we import the data needed to fill your library:

• Steam, PlayStation Network, Xbox — game library, playtime, and achievements/trophies. Connection tokens are stored server-side and used only to sync your data; you can disconnect any time in Settings.
• Goodreads, Letterboxd, IMDb, ListenBrainz — imports of your existing lists and history where you initiate them.
• Discord — if you link your Discord account, we receive your Discord user ID and username so we can confirm your Loredeck membership tier to Discord's Linked Roles system, and, with your permission, add you to the Loredeck community server. We do not read your messages, servers, or friends list. You can unlink at any time in Settings, or revoke access from Discord's own authorised-apps settings.

Information collected automatically

• Device push token — if you enable notifications, so we can deliver them.
• Basic technical data — app version and diagnostic logs when something fails, used to fix bugs. We do not run third-party advertising or cross-app tracking SDKs.

Purchase information

Subscriptions are processed by Google Play or the Apple App Store, with entitlements managed by RevenueCat. We receive your subscription status and store-generated identifiers — never your card number or full payment details.

2. How we use information

• To provide the Service: syncing your deck, showing your reviews to people you share with, running clubs, computing your stats;
• To personalize recommendations and discovery based on your interests and library (this processing happens within the Service and is not shared with advertisers);
• To send notifications you've enabled (price drops, releases, club and social activity) — each category can be turned off in Settings → Notifications;
• To operate memberships, trials, and invite codes;
• To respond to support requests and investigate abuse reports;
• To keep the Service secure and debug failures.

3. What other users can see

Loredeck is social. Your username, display name, avatar, bio, and public activity (ratings, reviews, posts, public collections) are visible to other users. If you set your account to private, your deck and activity are limited to approved followers. Club content is visible to that club's members. You can block or mute other users, and report content, from within the app.

4. When we share information

We do not sell your personal information. We share it only with:

• Service providers that host and operate the Service on our behalf: Supabase (database, authentication, storage), RevenueCat (subscription management), Google Play / Apple (billing), Expo (push-notification delivery), Vercel (website hosting), and our email provider for transactional mail. Each receives only what it needs to do its job.
• Metadata sources — lookups to catalogs like IGDB, TMDB, Google Books, iTunes, and MusicBrainz send the query needed to fetch a title's details, not your identity.
• Discord — if you link your Discord account, we tell Discord your Loredeck membership tier so it can grant the matching role. Only that tier is shared, and only for as long as the account stays linked.
• Legal requirements — if required by law, or to protect the rights, safety, or property of users or Sandbox Labs.
• Business transfers — if Sandbox Labs is involved in a merger or acquisition, your information may transfer with the business; this policy would continue to apply until updated.

Some outbound store links are affiliate links. As an Amazon Associate, Loredeck earns from qualifying purchases. Affiliate partners know a click came from Loredeck but do not receive your Loredeck identity.

5. Data retention and deletion

We keep your information while your account is active. You can:

• Delete a post or review — deleting your own content removes it from the app immediately: nobody, including you, can see it again. It is erased from our systems within 30 days. If the content was reported by another user before you deleted it, we keep a copy while that report is reviewed, so that a report cannot be defeated by deleting the thing it is about. See Reported content below.
• Request a copy of your data — email support@loredeckapp.com and we will send it to you in a structured, machine-readable format within the period required by law.
• Delete your account — Settings → Data & Privacy → Delete account. This removes your profile, deck, content, and connection tokens from production systems. Residual copies persist in our encrypted database backups for up to 7 days, after which they are overwritten; they are never used to restore a deleted account. Images you uploaded (avatars and club banners) are stored separately from the database and are not included in those backups. Full steps are on our account deletion page.

Anonymized or aggregated data (like overall feature usage counts) may be retained.

Reported content

When someone reports a post or review, we record what was reported — the text, rating, and which titles it referred to — along with who posted it and when. We keep that record even if the author later deletes the content, and even if they delete their account. Without it, anything reported could be erased before we looked at it, and we would have no way to act on abuse or to show why we did.

These records are kept only for safety and moderation. They are never used for advertising, never sold, and are not part of your profile or anything other users can see. We keep them while the report is open and for a reasonable period afterwards so that repeat behaviour can be recognised, then delete them. If you believe a report about your content is being retained unfairly, email support@loredeckapp.com.

6. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is limited, credentialed, and logged. Connection tokens for external services are stored server-side, never on other users' devices. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

7. Children

Loredeck is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has an account, contact us and we will delete it.

8. Your rights

Depending on where you live (for example under GDPR or the CCPA), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. The in-app delete tool and the data-copy request described in section 5 cover most of these directly; for anything else, email support@loredeckapp.com and we will respond within the timeframe required by law. We do not discriminate against you for exercising your rights.

One limit is worth stating plainly: where content of yours has been reported by another user, we may keep the record of that report and a copy of the reported content after you delete it, for as long as we need it to review and act on the report. We rely on our legitimate interest in keeping the Service safe, and on our need to comply with legal obligations, to do so. Everything else is deleted as described in section 5.

9. International users

The Service is operated from the United States and your information is processed on servers located there. By using the Service you understand your information will be transferred to and processed in the US.

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced in the app or by email before they take effect. The effective date at the top always reflects the current version.

11. Contact

support@loredeckapp.com
Sandbox Labs, LLC · 8735 Dunwoody Place Ste N, Atlanta, GA 30350 US