Your information.
Explained.

Why we use your information

We use account information to provide sign-in, account confirmation and password recovery; your optional private profile and badges; collection sync when you enable it; and responses to support or privacy requests. We do not sell your personal information or use it for advertising. The current website and app do not include advertising trackers or a separate analytics SDK.

Your account and private profile

Registration and sign-in send your email address and password directly to Supabase over HTTPS. Supabase manages the account identifier, password authentication and sessions. Confirmation and password-reset emails are sent through the account service’s configured email provider.

The same Rottweiler account can be used in Vault, Trove and on this website. An optional display name, profile photo and account badges belong to that account. The website reads your own private Vault profile to show your name and photo while you are signed in; it does not copy that photo to a public profile or give other visitors access to it. Change your profile photo in your Vault app.

Profile photos are held in private Supabase Storage and requested using your signed-in session. The website displays them through a temporary in-memory image address, not a public image link. The app’s owner can manage account badges and look up the account details needed for that purpose; there is no public account directory.

Your Vault collection and optional cloud sync

The Windows and Android app saves your collection on your device. The iPhone web app saves it in device browser storage, including attached personal photos and collection history. If you choose to connect it to cloud sync, the app saves a combined collection backup to Supabase covering Legends, Pops and Cards. This can include item identifiers, collection statuses, quantities, notes, purchase details, build-a-figure progress, collection edit history, personal photos, collection identifiers and supported preferences.

Catalogue downloads are stored separately and are not uploaded as your private collection backup. Signing in alone does not enable collection sync. Turning sync off or signing out leaves the collection on your device and does not delete an existing cloud copy.

The current sync service keeps the latest collection save and up to ten previous saved versions for recovery. These are limited recent recovery points, not permanent storage of every past version or a substitute for a separate backup. Older personal photos and edits can remain in collection history. Removing an item from a list is not the same as erasing its history.

Access rules restrict collection and private profile requests to the signed-in account. Other collectors cannot browse your collection through this website or the new app. These services are not end-to-end encrypted: the operator and relevant service providers may access stored data where needed to operate the service, handle support and fulfil privacy requests.

The new app does not automatically import the retired apps’ cloud collections. Keeping the same sign-in does not silently merge old collection data into the new Vault.

Rottweiler Trove

Trove saves your LEGO, Transformers and NECA collection on your device. Connecting your account allows private collection sync between your devices. Trove uses the existing Rottweiler account service; its collections stay separate from Vault collections. The website does not display or edit either collection.

Trove’s catalogue checks contact Rebrickable, ActionFigure411 and the official NECA store, and product images contact their image hosts. Those services receive ordinary request information such as your IP address and the requested catalogue or image. Trove has no social feed, advertising or collection analytics. For questions about your Trove data or a deletion request, contact support@rottweilervault.com and name the app so the scope is clear.

What stays on your device or browser

Local collections, attached photos and exported backup files remain on your device. In Vault, Android protects saved app sign-in credentials using Android Keystore; Windows uses operating-system protected storage. The iPhone web app keeps its renewable sign-in session in browser storage rather than Windows or Android protected storage. Uninstalling an app, clearing browser or website data, storage eviction or losing a device can remove local data. Check that a cloud save has succeeded and keep a separate exported backup.

The main rottweilervault.com website uses browser storage for a renewable sign-in session, including account details and access and refresh tokens. It can keep you signed in between visits until you sign out or the session expires or is revoked. The website uses a fixed dark appearance. It does not store your password or download your private collection into browser storage. Sign out on shared devices.

Confirmation and password-reset pages handle email-link tokens in page memory and remove them from the address bar. They do not save those recovery tokens as a website sign-in. Your private profile photo is also held only in memory by the website and is released when you sign out or leave the page.

Retired Social and older app editions

Rottweiler Social has been retired. This rebuilt website no longer provides posts, comments, likes, follows, messages, public profiles or Social connections. It does not make Social requests when you browse or sign in.

Removing those screens does not automatically erase historical records. If you previously used Social, its stored profile details, posts, comments, messages, uploaded images and related records may still be held by the service. They remain within the scope of access and deletion requests. We have not treated the website redesign as permission to delete people’s records without a request.

The separate Legends, Pops and Cards editions, including the former iPhone and iPad web editions, are no longer offered or supported by this website. Their existing account records, local data or exported backups are not erased merely because those editions were retired. The new unified iPhone Home Screen web app is a separate edition from those retired apps. It uses the current Vault account and optional sync; it does not revive or automatically import their old cloud collections. The main website remains browsable on iPhone and iPad; the new web app is intended for iPhone.

Catalogue images, downloads and external services

App catalogue and image requests contact source websites and their image hosts. Depending on the collection and item, these may include ActionFigure411, In Demand Toys, Star Action Figures, Figure Realm, Figuronomy, Pop-Figures, Funko and TCGdex. They receive normal request information such as your IP address and the product or image requested. Retailer searches can send an item name to the chosen retailer, not your private collection notes or account password.

Netlify hosts the main rottweilervault.com website. Cloudflare Pages separately hosts the iPhone web app and its public catalogue files; the iPhone app and catalogues are not served by Netlify. Catalogue images can still come directly from the original image hosts. Cloudflare R2 hosts the Windows and Android downloads and update files. Supabase processes authentication, private profiles, optional synced collection data and uploaded photos; historical Social records may also remain there. The configured account email provider processes confirmation and password-reset delivery. These providers can process technical information such as IP addresses, request times and security or error logs to operate their services.

Providers may process information in countries other than your own, depending on service configuration. Their privacy information describes their processing practices: Netlify, Cloudflare and Supabase. Contact us if you need information about the services used for your account.

Links to Whatnot, TikTok, eBay, retailers and Ko-fi open independent services with their own privacy policies. The partner cards on this website are links, not embedded social feeds. We do not receive your payment-card details. A support email draft is sent only when you choose to send it. Backups and other exports can contain notes, spending details or personal photos; review them before sharing.

Buy the Treasure

This page shows real customer reviews and links to Whatnot and Hoarder’s Emporium. Purchases and delivery details are handled on those independent websites under their own terms and privacy policies. There is no Rottweiler basket, checkout or order database.

Retention and deletion

We keep your account and associated active cloud records while providing the account, until you request their removal. Retired-service records are not automatically removed by this redesign. Signing out, hiding a collection area or removing an item from a list is not a request to erase all related cloud or history records.

Request deletion here, or email support@rottweilervault.com from your registered address. Deletion is currently handled through support, not an instant website button. We verify ownership and aim to complete verified requests within seven days. We will contact you if clarification or additional time is needed.

A full deletion request covers the shared Rottweiler sign-in account used by both Vault and Trove, and associated active cloud records, including collection saves and history, purchase details, uploaded photos, profiles, badges and retained records from the older apps and Social. Removing that shared account affects both apps. We confirm the scope before acting. If you want only specific data removed, name Vault, Trove or the former app and describe the data in your request. Local app data and your exported backups are not remotely erased.

Service-provider security or delivery logs and existing infrastructure backups may not be erased at the same time as active account records and remain subject to their retention settings. They are not available as a collection in the app. Support correspondence is used to handle your request; tell us if you also want it removed, subject to any applicable legal obligations.

Your choices, rights and contact

You can use the Vault app without an account, keep your collection on your device, choose whether to enable sync or attach personal photos, export a backup and sign out. For privacy questions or requests, contact bigfatjakes at support@rottweilervault.com. Never email your password.

You can request access to, correction or deletion of your personal data. Depending on the applicable law and circumstances, you may also have rights to restrict processing or obtain a portable copy of your data.

You can object to the processing of your personal data. Contact us using the address above so we can consider your request and explain any applicable limits. If you are unhappy with our response, you can raise a concern with the UK Information Commissioner’s Office or your relevant data protection authority.

Independent collector software

Rottweiler Vault and Rottweiler Trove are independent collector apps. They are not affiliated with Marvel, Hasbro, Funko, Pokémon, Nintendo, LEGO or NECA. Character names, trademarks and product photography belong to their respective owners. Website product demonstrations are not a public view of a visitor’s private collection.