Privacy Policy

RetroTracker is a catalog for your machines, parts, software, books, photos, and storage. We collect what we need to run that catalog, sign you in, and bill a horde’s storage plan. We do not sell your personal information. The Terms of Service cover use of the product.

What we collect

• Account. Name, email, password hash (we never store the raw password), optional passkeys, and optional two-factor secrets.
• Sign-in with Google or Apple. The provider sends an identifier and the email/name you allow. We do not receive your provider password.
• Catalog. Records you and your horde members create: machines, parts, software, books, locations, rooms, bins, worklogs, tags, labels, and notes.
• Photos. Images you upload, stored in S3 compatible cloud storage, currently Google Cloud Storage, and served through our app. Previews are generated from those files.
• Links. URLs you paste to files in Google Drive, Dropbox, or iCloud. We store the link and a title. We do not receive OAuth access to those drives.
• Billing. Horde plan, Stripe customer and subscription IDs. Card numbers are handled by Stripe, not stored in RetroTracker.
• HTTP access request logs. Path, status, timing, and similar operational fields. They are used for debugging and maintenance, not for analytics.
• Technical. Session cookies and storage metrics we use to operate the service.

How we use it

To provide the catalog, authenticate you, enforce horde permissions and photo quotas, send transactional email (verification, password reset, invites), process horde subscriptions, and keep the service secure. We do not use your catalog or photos to train public AI models, and we do not run third-party advertising on your data.

Sharing

Horde members see the workspace they belong to. If the owner makes a horde public, visitors with the link can see published machines, worklogs, and photos. Processors we use to run RetroTracker include:

• Stripe — checkout, customer portal, and invoices.
• S3 compatible cloud storage, currently Google Cloud Storage — photo files for hosted instances.
• Google and Apple — only if you choose that sign-in method.

WE MAY DISCLOSE INFORMATION IF REQUIRED BY LAW OR TO PROTECT THE SERVICE AND ITS USERS. RetroTracker resides in the United States and is, like it or not, subject to those laws and regulations. Amazon affiliate links on the Labels page go to Amazon; that purchase is between you and Amazon.

Cookies

We use a session cookie to keep you signed in and a theme preference in local storage. No advertising cookies. The service worker caches app shell files so RetroTracker can load offline; that cache lives on your device.

Retention

Account and catalog data stay until the horde or account is removed. Photo objects are deleted when you delete the photo or when we remove the horde. Server logs are kept only as long as we need them for operations and abuse response. Stripe keeps billing records under its own policy.

Your choices

You can edit your profile, change horde visibility (owners), delete individual catalog items and photos, and cancel a paid plan in Stripe’s portal. There is no self-serve “delete my account” button yet; ask via in-app Feedback (or an instance administrator) if you want an account removed. You can disconnect Google or Apple by switching to email sign-in where the instance allows it, and you can turn off two-factor authentication in Account.

Children

RetroTracker is a service aimed at consenting adults over the age of 13 only. We do not knowingly collect information from children under 13. If we are notified or otherwise discover that the owner of an account is under 13 years of age, we will act in good faith as required by law to remedy ownership to a parent or legal guardian and secure proper authorization for continued use, but depending on the laws at the time of the incident, our hands may be tied and require summary deletion and termination of the account.

Security

We use HTTPS, hashed passwords, optional passkeys and two-factor authentication, and horde-scoped permissions. No method is perfect. If you believe there is a vulnerability, send an email to support@retrotracker.net or use in-app Feedback rather than posting exploit details publicly.

Changes

We will post updates on this page with a new effective date. Continued use after a change means you accept the updated policy.

Contact

Nybbles and Bytes Studios, LLC. Signed-in users can reach us through Feedback in the app.