Effective date: September 2, 2026
VintageTrail helps users find thrift and vintage stores and optionally record an in-person check-in. This policy explains what data the app handles and why.
Precise location: Only after you tap the check-in button while the app is visible, VintageTrail requests a single foreground location reading to determine whether you are within 100 meters of the selected store. We do not request background location, create geofences, or continuously track you. The raw latitude and longitude are used on-device for the distance calculation and are not uploaded to our server.
App-scoped identifier and check-ins: The app generates a random installation/account identifier (not an Android advertising ID, IMEI, serial number, or other hardware identifier). We send that identifier, store IDs, and check-in timestamps to our Cloudflare Worker and D1 database so your passport records can be synchronized.
Purchases: Google Play processes subscription payments. VintageTrail sends the Google Play purchase token, product ID, and a one-way-obfuscated version of the app-scoped account identifier to our server, which verifies subscription status with the Google Play Developer API. Device model, manufacturer, hardware identifiers, and device fingerprints are not sent for receipt validation. We do not receive or store your card number.
Community safety: If you report a haul post, we store the reported content identifier, reported username, reason, time, and your app-scoped identifier when available so the report can be reviewed and abuse can be prevented.
We use data only to provide check-ins, subscription access, fraud prevention, support, and community moderation. Data is processed by service providers necessary to operate the app, including Cloudflare and Google Play. We do not sell personal data. Check-in/account data remains until you delete it; moderation records may be retained as needed for safety, dispute handling, and legal obligations.
Location permission is optional and can be revoked in Android Settings. You can use store discovery without granting location, but verified check-in will be unavailable.
Inside the app, choose "Delete My Data" in the sidebar. After confirmation, the app calls our deletion endpoint to erase the corresponding user and check-in rows, anonymize the reporter identifier on retained safety records, then clears local passport data. You can also save a deletion code in the app and submit it through our public web deletion page. Google Play subscription and transaction records are controlled by Google and may be retained for financial/legal requirements; deleting VintageTrail data does not cancel a subscription. Manage or cancel subscriptions in Google Play.
VintageTrail is not directed to children under 13. We may update this policy and will change the effective date when we do.
If you have questions, feedback, or privacy inquiries regarding VintageTrail, please contact us by email: wingsoar2023@gmail.com.