Privacy Policy

1. Overview

This Privacy Policy explains how MyHobby ("we", "us") collects, uses, discloses, and protects personal information when you use the Service. We aim to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), and, for users in the United States, applicable laws including the CAN-SPAM Act and state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

2. Information we collect

Account information: email address and a hashed password; optional display name, handle, location, and profile details.

Content you provide: photos and descriptions of your collectibles, collection and wanted-list entries, forum posts and messages.

Usage and device information: log data such as IP address, browser/user-agent, and actions you take in the Service, used for security, debugging, and analytics.

Consent records: when and how you accepted the Terms and whether you opted in or out of marketing emails (including date, IP, and source).

3. How we use information

To provide, secure, and improve the Service; to authenticate you; to enable cataloguing, community, and listing features; to run AI-assisted item recognition on photos you upload; to communicate with you about your account and service-related matters; and to comply with legal obligations.

4. Marketing emails and your consent

We will only send you marketing or promotional emails if you have given express opt-in consent (for example, by checking the optional marketing box at sign-up or enabling it in your profile). This consent is separate from, and not required for, creating an account.

We keep a log of your consent (including the date, source, and IP address) as required by CASL and the CAN-SPAM Act. You can withdraw consent at any time — from your profile settings or via the unsubscribe link in any marketing email — and we will stop sending marketing emails promptly. Service and transactional emails (e.g., account, security, and listing notifications) are not marketing and may still be sent.

5. Legal bases

In Canada, we rely on your consent (express or implied as permitted by PIPEDA) and on our legitimate need to operate the Service. For marketing email, we rely on your express consent under CASL. Where US state laws apply, we process the categories of personal information described above for the business purposes listed here.

6. Cookies and local storage

We use browser local storage to keep you signed in (an authentication token) and to remember preferences such as your view settings. We do not use third-party advertising or cross-site tracking cookies. Clearing your browser storage will sign you out.

7. How we share information

Service providers: we use hosting/infrastructure providers and an AI provider (to process uploaded photos for item recognition) and an email-delivery provider; they process data on our behalf under contract.

Other users: information you choose to make public (e.g., public collection items, profile, forum posts) is visible to other users and visitors.

Legal and safety: we may disclose information if required by law or to protect the rights, safety, and security of MyHobby, our users, or the public.

We do not sell your personal information.

8. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, except where we must retain it to comply with legal obligations (for example, consent logs kept as proof of consent) or to resolve disputes.

9. Your rights and choices

Subject to applicable law, you may request access to, correction of, or deletion of your personal information; withdraw consent (including for marketing); and ask about how your data is handled. Canadian users have rights under PIPEDA; California and certain other US-state residents have rights including access, deletion, and the right not to be discriminated against for exercising them.

To exercise any of these rights, contact us at [email protected]. You can delete your account and most associated content from your account settings.

10. Security

We use reasonable technical and organizational safeguards (such as password hashing, encrypted credential storage on devices, and access controls). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Service is not intended for children. We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a child has provided us information, contact us and we will delete it.

12. International transfers

We operate in Canada and may process and store information on servers located in Canada and the United States. Where information crosses borders, it may be subject to the laws of those jurisdictions.

13. Changes to this Policy

We may update this Policy from time to time. We will update the version date and, for material changes, take additional steps to notify you where appropriate.

14. Contact

For privacy questions or to exercise your rights, contact us at [email protected].