Last updated: January 9, 2026
This Privacy Policy describes how Shoebox Archives ("we", "us", or "our") collects, uses, and shares information about you when you use our application and website (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Information You Provide
When you use our Service, we collect information you provide directly to us:
- Account Information: When you create an account, we collect your email address, name, and password.
- Profile Information: You may optionally provide additional profile information such as a profile photo and display name.
- Content: We collect the content you create, upload, store, and share through the Service, including archives, collections, items, files (images, audio, video, documents, 3D models, text), and associated metadata.
- Communications: When you contact us for support or feedback, we collect the information you provide in those communications.
Information Collected Automatically
When you use the Service, we automatically collect certain information:
- Device Information: Information about the device you use to access the Service, including device type, operating system, and browser type.
- Usage Information: Information about how you use the Service, including features you use, actions you take, and time spent on the Service.
- Log Data: Server logs that may include your IP address, access times, and pages viewed.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Create and manage your account
- Store and display your content
- Process and fulfill your requests
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent security incidents and fraudulent or illegal activities
- Personalize and improve your experience
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
With Your Consent
When you choose to share your archives, collections, or items with other users, those users can access the content based on the permissions you grant.
Service Providers
We may share information with third-party service providers who perform services on our behalf, such as hosting, analytics, and customer support. These providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government demands.
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.
Protection of Rights
We may disclose information to protect the rights, property, and safety of Shoebox Archives, our users, and the public.
4. Data Storage and Security
Storage
Your content is stored on Cloudflare's global infrastructure, including Cloudflare R2 for file storage and Cloudflare D1 for database storage. Data may be replicated across multiple geographic locations for reliability and performance.
Security Measures
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit using TLS
- Encryption of data at rest
- Regular security assessments
- Access controls and authentication requirements
- Monitoring for security threats
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Your Rights and Choices
Access and Portability
You can access your account information and content at any time through the Service. You can export your data in portable formats.
Correction
You can update or correct your account information through your profile settings.
Deletion
You can delete individual archives, collections, items, and files at any time. You can also request deletion of your entire account by contacting us or using the account deletion feature in the app.
When you delete your account:
- Your personal information will be deleted within 30 days
- Content in shared archives may be retained if other users have access
- Some information may be retained in backups for a limited period
- We may retain certain information as required by law
Communication Preferences
You can opt out of promotional communications by following the unsubscribe instructions in those messages or by adjusting your notification settings.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you with the Service. We may also retain information as required by law or for legitimate business purposes, such as:
- Resolving disputes
- Enforcing our agreements
- Maintaining security
- Preventing fraud
When you delete content or your account, we will delete or anonymize your information within a reasonable timeframe, except as required by law.
7. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries.
We take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy.
9. Third-Party Services
The Service may contain links to or integrations with third-party websites and services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, through the Service or by email.
Your continued use of the Service after changes to this Privacy Policy indicates your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
- By email: privacy@shbxarc.org
- By visiting the Help section in the Application