Back to Home

Privacy Policy

for RecollectKits

Last Updated: July 24, 2026

Introduction

Welcome to RecollectKits. The Platform at recollectkits.com is operated by RecollectKits LLC ("RecollectKits," "we," "our," or "us"), the data controller responsible for your personal information. We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Platform.

By creating an account or using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Information You Provide to Us

Account Information:

  • Email address
  • Password (stored as a secure one-way hash, never in plain text)
  • Username
  • Your name and country, provided at sign-up
  • Optional profile details you choose to add, such as a profile photo (avatar) and a short bio

Your public profile shows your username by default. You can choose whether your name is displayed publicly using the "show real name" setting in your profile — when it is off, visitors see your username instead of your name.

Social Features:

  • Friends and friend requests you send or receive
  • Kits you like and the wishlists you build

When you send someone a friend request, we notify that person and share your username and profile photo with them so they can respond.

Catalog Contributions:

If you submit a kit to our shared catalog, a moderator reviews it. Once approved, the kit's factual details and any photos you provided are published to the public catalog so other collectors can find and add that kit. Because the catalog is a shared reference that others rely on, approved catalog entries and their images remain in the catalog even if you later delete your account, though they are no longer linked to your identity. Your own private copy of a kit (your notes, prices, and personal photos) is separate and is removed when you delete your account.

Partner Applications:

If you apply through our partner form, we collect the name, email, username, description, and links you submit so we can evaluate and respond to your application.

Collection Data:

  • Information about the kits you catalog
  • Photos you upload
  • Descriptions, notes, and the stories you attach to a kit (for example the match, who you were with, or who wore it before you)
  • Purchase details you choose to record, such as the price you paid and where you acquired a kit (kept private to your account and never shown in public views)
  • Collection organization and categorization

Communications:

  • Messages you send to us
  • Feedback and correspondence

Information Collected Automatically

Usage Information:

  • Pages you visit on our Platform
  • Features you use
  • Time and date of your visits
  • Time spent on pages
  • Links you click

Device Information:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Referring website

We collect this primarily through standard server logs and error-monitoring tools. If we introduce dedicated product analytics in the future, we will update this policy to describe it and the provider involved.

How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Platform: Create and manage your account, display your collection, enable platform features
  • Improve our services: Analyze usage patterns, fix bugs, develop new features
  • Communicate with you: Send account and security emails, activity notifications you can control (such as friend requests, likes, and features), respond to inquiries, and — where you have not opted out — occasional product updates and newsletters. You can manage notification and marketing emails from your email preferences or unsubscribe link; essential account emails are always sent.
  • Ensure security: Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations: Meet regulatory requirements and respond to legal requests
  • With your consent: For any other purpose with your explicit consent

How We Share Your Information

We may share your information in the following circumstances:

Service Providers (Subprocessors):

We use a small number of trusted service providers to operate RecollectKits. Each processes personal data only on our instructions and under a written data processing agreement:

  • Supabase — database, authentication, and photo storage
  • Stripe — payment processing and subscription billing
  • Vercel — application hosting and content delivery
  • Resend — transactional and marketing email delivery (account confirmations, receipts, product updates, and similar messages)
  • Cloudflare — encrypted off-site backup storage
  • Sentry — error monitoring and diagnostics

These providers are located in the United States. Where we transfer personal data of users in the EEA, UK, or Switzerland to these providers, the transfers are protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. We will update this list if our service providers change.

Third-Party Content and Assets:

To build our kit catalog and display the Platform, your browser or our servers may contact the following third parties. We do not share your account information with them; however, when your browser loads a resource directly, that provider necessarily receives your IP address and basic request information:

  • Wikipedia and Wikidata — we retrieve public factual information about teams, players, and squads to populate the catalog. These requests are made anonymously and do not include your identity.
  • A flag-image provider (flagcdn.com) — country flags are loaded as images in your browser.
  • Google Fonts — web fonts are loaded to render the site.
  • We use Cloudflare Turnstile to protect signup and login from automated abuse; it processes limited device and network signals.

Legal Requirements:

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

Business Transfers:

If RecollectKits is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

Public Information:

Content you choose to make public (such as a public profile, public collections, or the stories attached to your kits) is accessible to anyone on the internet, not only registered users, and may be indexed by search engines. You control what is public through your profile and collection settings, including whether your real name is shown (see the "show real name" setting) and whether your profile and collections are public. Sensitive details such as the price you paid and where you acquired a kit are never included in public views.

Please note that photos you upload are hosted on our storage infrastructure and may be accessible to anyone who has the direct image link, even when the related kit or collection is not otherwise public. Do not upload images you need to keep strictly private.

Aggregated Data:

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Delete your account from your account settings, or ask us to do it for you. Deleting your account removes your profile, collections, personal kit copies, notes, wishlists, likes, friend connections, and the personal photos you uploaded. Approved contributions to the shared public catalog remain as reference data but are no longer linked to you (see "Catalog Contributions" above). If you also submitted a partner application, contact us to have those email-based records erased.
  • Export: Download a copy of your data (your profile, collections, kits, stories, and wishlist) in a portable format from your account settings. For a copy of any additional data we hold, contact us.
  • Opt-out: Unsubscribe from marketing and notification emails from your email preferences or any unsubscribe link (account and security emails may still be sent)

To exercise these rights, contact us at hello@recollectkits.com.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Backup copies may be retained for an additional 90 days.

Our payment processor, Stripe, retains transaction and billing records under its own legal and tax obligations, independently of your account deletion.

Cookies and Local Storage

We and our service providers use cookies and browser local storage to:

  • Keep you signed in (authentication tokens)
  • Remember your preferences
  • Keep the Platform secure and detect abuse
  • Diagnose errors and understand how the Platform is used

Essential cookies and storage are required for core features such as signing in. You can control or clear cookies through your browser settings, though disabling them may limit functionality. We do not use cookies to sell your information or to serve third-party advertising.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of passwords and sensitive data
  • Secure hosting infrastructure
  • Regular security assessments
  • Access controls and authentication
  • Secure data transmission (HTTPS/SSL)

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Children's Privacy

Our Platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Users

RecollectKits is based in the United States. If you are accessing our Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

For European Union Users (GDPR):

We process your personal information based on the following legal grounds:

  • Performance of our contract with you (providing the Platform)
  • Your consent (where applicable)
  • Our legitimate interests (improving our services, preventing fraud)
  • Legal obligations

You have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority.

For California Residents (CCPA):

California residents have specific rights regarding personal information, including:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of sale of personal information (we do not sell personal information)
  • Right to deletion
  • Right to non-discrimination

Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification (for significant changes)

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: hello@recollectkits.com

Website: recollectkits.com

Mailing address:
RecollectKits LLC
2430 Military Rd, Suite 685
Niagara Falls, NY 14304