Privacy policy

ReliArchive collects the minimum it needs to run a trustworthy archive: your account details, the content you choose to submit and a small amount of technical data used to prevent abuse. There are no advertising trackers on the site, your data is never sold, and your email address is never published. Raw IP addresses are never stored; only a salted hash is kept for abuse detection.

The rest of this page explains each of those points properly.

Three kinds of information are collected, all of them tied to things you actively do:

• Account information: your email address, display name and handle, provided when you sign up. Your password is handled by our authentication provider and is never visible to us in plain form.
• Content you submit: ownership reports, product requests, votes and the items you add to your collection, together with the time they were submitted.
• Abuse prevention data: when you submit a report or request, a salted hash of your IP address and browser user agent is stored. The hash lets us detect floods of fake submissions from one source without ever keeping the address itself. It cannot be reversed into your IP address.

Everything collected serves one of these purposes:

• Operating your account: signing you in, showing your collection and attributing your submissions to you.
• Building the archive: approved reports feed the published reliability figures. Aggregated figures never identify you.
• Moderation and abuse prevention: reviewers see the content of your submission when deciding whether it enters the record, and the hashed fingerprint helps detect coordinated fake reports.
• Contacting you about your submissions: for example, when a product you requested is added. We do not send marketing email.

The substance of an approved ownership report becomes part of the public record: the product, the ownership period, the usage described and any problems reported. Your email address is never published, and reports are not displayed with your name attached.

Your collection is private to your account. Product requests appear publicly as a product name with a vote count, without the identity of the people who requested it.

The site sets cookies for exactly two things: keeping you signed in and remembering your theme preference. There are no advertising cookies, no cross site trackers and no third party analytics scripts. Because none of the cookies are optional extras, there is no cookie banner to click through.

Your data is never sold or rented, and it is not shared with advertisers or data brokers. It is processed by the infrastructure providers the service is built on:

• Supabase, which provides authentication and the database where accounts and submissions are stored.
• Vercel, which hosts the site and processes requests as any web host does.
• Retailers linked from product pages receive nothing from us. If you follow an affiliate link, the retailer's own privacy policy applies from that point on.

Your account information is kept for as long as your account exists. Approved reports are kept indefinitely, because the archive's value depends on its history remaining intact; a reliability figure that quietly loses its underlying data stops being trustworthy.

If you delete your account, your personal details are removed and your reports are anonymised rather than deleted, so the published record stays accurate without remaining linked to you. Hashed abuse prevention fingerprints are retained only as long as they are useful for detecting patterns of misuse.

Depending on where you live, you may have legal rights over your personal data, including under the GDPR and similar laws. Regardless of jurisdiction, we honour the following for everyone:

• Access: ask for a copy of the personal data held about you.
• Correction: fix inaccurate account details, either from your account settings or by asking us.
• Deletion: request deletion of your account and personal details, with reports anonymised as described above.
• Objection: object to any processing you believe is unjustified, and we will respond with an explanation or a change.

The service is not directed at children and accounts require a minimum age of 16. If you believe a child has created an account, contact us and it will be removed.

If this policy changes in any material way, the date at the top of this page will be updated and significant changes will be made visible on the site. Older submissions remain governed by the promise made when they were submitted: nothing about you is ever published.

Privacy questions and data requests can be sent to contact@reliarchive.com. Requests about your data are answered by a person, not an automated system.