Privacy Policy

This policy describes how VaultSquirrel handles information in a hobby collectibles portfolio tracker. VaultSquirrel is operated by an individual in the United States under the name VaultSquirrel. There is no company. Contact: support@vaultsquirrel.com.

When you use VaultSquirrel, you may provide:

• An email address and a password. The password is stored by the auth provider, not as plain text in the app.
• Collection records you type or import: names, categories, notes, identifiers, what you paid, fees, costs, and sales.
• Photos you upload. Originals are kept so you can export them. The app also stores a smaller image for the screen.
• Public wallet addresses, or a public name such as ENS, and the NFT holdings read for those addresses.
• Watchlist entries, showcase settings, and in-app notification preferences.
• A browser push subscription, if you turn phone notifications on.

Do not upload private keys, seed phrases, or photos you do not want stored. VaultSquirrel does not ask for wallet secrets.

Wallet addresses and on-chain holdings are public data. VaultSquirrel stores the address you choose to track and the holdings it reads for that address. That does not make the address private, and it does not give VaultSquirrel control of the wallet. You can remove the wallet from your account.

VaultSquirrel uses this information to run your portfolio: show your holdings, estimate values, draw benchmark charts, send notifications you asked for, and publish a showcase only when you turn that link on. Item details needed for a price lookup are sent to the data source for that lookup. Your password is not.

Value estimates can use marketplace data, PriceCharting, public web pages, and an AI model (photo identification and a web research summary). Those requests include the item description or photo needed to make the estimate. Wallet lookups send the public address to blockchain data providers. Benchmark charts use public series for the S&P 500, a gold price index, Bitcoin, and CPI inflation.

The site is hosted on Vercel. Account data, photos, and the login are stored with Supabase. Those providers process data to host the service. VaultSquirrel does not sell your information and does not run advertising cookies.

VaultSquirrel uses a cookie to keep you signed in. The cookie is set by Supabase Auth and is required for the account to work. A theme choice may be saved in local storage on your device. The site registers a service worker so browser notifications can be delivered if you enable them. You can sign out from the header, which clears the session cookie.

Collection data stays until you delete the item or your account. Password-reset links are short-lived and are handled by the auth provider. Server logs kept by the host may include a request time and address for a limited period.

Open Settings and choose “Delete my account”. Type DELETE to confirm. You can download a spreadsheet of your holdings first. Deletion removes your rows from the account tables, deletes the photo files from storage, and then deletes the login. A public showcase link stops working because the showcase row is removed. Shared benchmark data (the market indexes themselves) is not deleted, because it is not your personal data.

If deletion fails, the page tells you whether the account is still active. You can try again. For help, email support@vaultsquirrel.com.

VaultSquirrel is not directed at children. Do not create an account if you are under 13.

Updates to this policy are posted on this page with a new date. Questions and deletion requests: support@vaultsquirrel.com.