Privacy Policy

Effective date: September 21, 2026

This policy explains what information Sandbox Labs, LLC ("we," "us") collects when you use the Loredeck app and loredeckapp.com (the "Service"), how we use it, and the choices you have. The short version: we collect what's needed to run a media-tracking app with social features, we don't sell your data, you can delete everything from inside the app, and you can ask us for a copy of it at any time.

1. Information we collect

Information you provide

• Account details — email address, username, display name, and password (stored as a salted hash; we never see the plain text). If you sign in with Google or Apple, we receive your email address and basic profile information from that provider instead (with Sign in with Apple you can choose to hide your email; we then receive Apple's relay address).
• Profile — optional avatar, bio, profile tags, and media-interest preferences.
• Activity and content — the media you track; your statuses, ratings, reviews, watch/read logs, goals, collections, posts, comments, reactions, club memberships and discussions, and custom themes.
• Support messages — reports you send through Contact Us, delivered to our support inbox with a copy to your email.
• Launch notification list — while loredeckapp.com accepted sign-ups to be told when Loredeck became generally available, we stored that address (plus the date and a one-way hash of your IP address, used only to stop bulk abuse of the form). It is used solely to send you a confirmation and a single launch announcement, and never shared. Every one of those emails carries an unsubscribe link; unsubscribing stops all further mail, and you can ask us to delete the address entirely at support@loredeckapp.com.
• Early access application — while loredeckapp.com accepted applications to be an early tester, we stored the applicant's email address and answers: which media you track, what tools you use today, whether you'd connect those accounts, roughly how large your library is, which phone you'd test on, how likely you are to report problems, and any optional comment you write. It was used only to decide who to invite and to send that invite; it is never sold or shared, and it is not used for advertising. Applicants who also ticked the release-notification box were added to that list as described above. Neither form is on the site any more — Loredeck went to full release rather than a staged early access. To withdraw an application or have the answers deleted, email support@loredeckapp.com.

Information from connected services (optional)

If you choose to connect an external account, we import the data needed to fill your library:

• Steam, PlayStation Network, Xbox — game library, playtime, and achievements/trophies. What we store to keep the connection working differs by platform: for Steam, your public Steam ID (you sign in on Steam's own page; we never see your Steam password); for PlayStation Network, your PSN online ID and account ID — ownership is confirmed by a short code you place in your PSN "About Me", and we never ask for your PlayStation password or sign-in cookie; for Xbox, the OpenXBL API key you paste in, which we use to read your Xbox profile, games and achievements. These identifiers and keys are stored server-side, are readable only by you and our systems, and are used only to sync your data. You can disconnect any time in Settings, which removes them.
• Goodreads, Letterboxd, IMDb, ListenBrainz — imports of your existing lists and history where you initiate them. To match imported titles to our catalogue, the titles, authors and ISBNs in your import file are sent as search queries to the book and film catalogues listed in section 4; nothing about you accompanies them. For ListenBrainz we store your public ListenBrainz username; no password or token.
• Discord — if you link your Discord account, we receive your Discord user ID and username so we can confirm your Loredeck membership tier to Discord's Linked Roles system, and, with your permission, add you to the Loredeck community server. We do not read your messages, servers, or friends list. You can unlink at any time in Settings, or revoke access from Discord's own authorised-apps settings.

Information collected automatically

• Device push token — if you enable notifications, so we can deliver them.
• Crash reports and performance data — when the app crashes or hits an error, a report is sent to Sentry, our crash-reporting provider: the error itself, the screens you moved through just before it, your device model and OS version, the app version, and your account ID (an internal identifier — not your name, email or IP address). A small sample of screen-load timings is sent the same way so we can see which parts of the app are slow. Sentry keeps these reports for 90 days. We do not run third-party analytics, advertising, or cross-app tracking SDKs.

Purchase information

Subscriptions are processed by Google Play or the Apple App Store, with entitlements managed by RevenueCat. We receive your subscription status and store-generated identifiers — never your card number or full payment details.

2. How we use information

• To provide the Service: syncing your deck, showing your reviews to people you share with, running clubs, computing your stats;
• To personalize recommendations and discovery based on your interests and library (this processing happens within the Service and is not shared with advertisers);
• To send notifications you've enabled (price drops, releases, club and social activity) — each category can be turned off in Settings → Notifications;
• To operate memberships, trials, and invite codes;
• To respond to support requests and investigate abuse reports;
• To keep the Service secure and debug failures.

3. What other users can see

Loredeck is social. Your username, display name, avatar, bio, and public activity (ratings, reviews, posts, public collections) are visible to other users. If you set your account to private, your deck and activity are limited to approved followers, and you can hide individual sections of your profile (collections, clubs, Top 5s, in-progress titles) and individual kinds of activity in Settings → Privacy. Club content is visible to that club's members. You can block or mute other users, and report content, from within the app.

Share links (for example to a post, a public collection, or a profile) can be opened by people who are not signed in. The preview they see is limited to what is already public: for a post, the caption, rating and an excerpt of the review plus the author's username, display name and avatar; for a collection, its name, owner and a few covers; for a profile, the username and display name, plus the avatar and bio only if the account is not private. Posts by private accounts and non-public collections do not produce previews at all.

4. When we share information

We do not sell your personal information. We share it only with:

• Service providers that host and operate the Service on our behalf: Supabase (database, authentication, storage), RevenueCat (subscription management), Google Play / Apple (billing), Expo (push-notification delivery — Expo's service receives your push token and the text of each notification in order to deliver it), Sentry (crash reporting, as described in section 1), Vercel (website hosting), and Resend (transactional email — it receives your email address and the message we send you). Each receives only what it needs to do its job.
• Metadata sources — lookups to catalogs such as IGDB, TMDB, Google Books, Open Library, ISBNdb, Apple's iTunes Search API, MusicBrainz, Deezer, The New York Times bestseller lists, and Wikipedia send the query needed to fetch a title's or creator's details, not your identity. Store price checks (Steam, Xbox, PlayStation, Nintendo) likewise send only the product being checked.
• Connected platforms — when you link Steam, PlayStation Network, Xbox or ListenBrainz, the identifier for that account (your Steam ID, PSN online ID, Xbox user ID via OpenXBL, or ListenBrainz username) is sent to that platform to fetch your data. That is the whole point of linking, and it stops when you disconnect.
• Discord — if you link your Discord account, we tell Discord your Loredeck membership tier so it can grant the matching role. Only that tier is shared, and only for as long as the account stays linked.
• Legal requirements — if required by law, or to protect the rights, safety, or property of users or Sandbox Labs.
• Business transfers — if Sandbox Labs is involved in a merger or acquisition, your information may transfer with the business; this policy would continue to apply until updated.

Some outbound store links are affiliate links. As an Amazon Associate, Loredeck earns from qualifying purchases. Affiliate partners know a click came from Loredeck but do not receive your Loredeck identity.

5. Data retention and deletion

We keep your information while your account is active. You can:

• Delete a post or review — deleting your own content removes it from the app immediately: nobody, including you, can see it again. It is erased from our systems within 30 days. If the content was reported by another user before you deleted it, we keep a copy while that report is reviewed, so that a report cannot be defeated by deleting the thing it is about. See Reported content below.
• Request a copy of your data — email support@loredeckapp.com and we will send it to you in a structured, machine-readable format within the period required by law.
• Delete your account — Settings → Data & Privacy → Delete account. This removes your profile, deck, content, and connection tokens from production systems. Residual copies persist in our encrypted database backups for up to 7 days, after which they are overwritten; they are never used to restore a deleted account. Images you uploaded (avatars and club banners) are stored separately from the database and are not included in those backups. Full steps are on our account deletion page.

Anonymized or aggregated data (like overall feature usage counts) may be retained. Three other things outlive an account, each for a stated reason: crash reports already sent to Sentry age out on their own within 90 days and carry only an internal account ID that no longer maps to anyone; our moderation log keeps a record of moderation actions, including the username they concerned, so that repeat abuse can be recognised; and if you joined the launch-notification list or applied for early access on loredeckapp.com, that email entry is separate from your account — unsubscribe from any of those emails, or write to support@loredeckapp.com, to have it removed.

Reported content

When someone reports a post or review, we record what was reported — the text, rating, and which titles it referred to — along with who posted it and when. We keep that record even if the author later deletes the content, and even if they delete their account. Without it, anything reported could be erased before we looked at it, and we would have no way to act on abuse or to show why we did.

These records are kept only for safety and moderation. They are never used for advertising, never sold, and are not part of your profile or anything other users can see. We keep them while the report is open and for a reasonable period afterwards so that repeat behaviour can be recognised, then delete them. If you believe a report about your content is being retained unfairly, email support@loredeckapp.com.

6. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is limited, credentialed, and logged. Connection identifiers and keys for external services are stored server-side and are readable only by you and our systems, never by other users or on other users' devices. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

7. Children

Loredeck is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has an account, contact us and we will delete it.

8. Your rights

Depending on where you live (for example under GDPR or the CCPA), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. The in-app delete tool and the data-copy request described in section 5 cover most of these directly; for anything else, email support@loredeckapp.com and we will respond within the timeframe required by law. We do not discriminate against you for exercising your rights.

One limit is worth stating plainly: where content of yours has been reported by another user, we may keep the record of that report and a copy of the reported content after you delete it, for as long as we need it to review and act on the report. We rely on our legitimate interest in keeping the Service safe, and on our need to comply with legal obligations, to do so. Everything else is deleted as described in section 5.

9. International users

The Service is operated from the United States and your information is processed on servers located there. By using the Service you understand your information will be transferred to and processed in the US.

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced in the app or by email before they take effect. The effective date at the top always reflects the current version.

11. Contact

support@loredeckapp.com
Sandbox Labs, LLC · 8735 Dunwoody Place Ste N, Atlanta, GA 30350 US