HoardControl (hoardcontrol.com) is a small, invite-only web app for keeping track of a collection and who has borrowed what. It’s run by one person, the owner, for the friends they invite. This page explains what it stores, who can see it, and how to have it deleted. Questions: privacy [at] hoardcontrol [dot] com.
What HoardControl stores
- Your account: your email address, your name, and your settings (such as light or dark theme).
- Your collection: the items you add and their details, notes, prices and locations; the photos you upload (including photos of your own copies, with their captions and dates); and your loans, including the names and any contact details you enter for the people you lend to.
- Your imports: what you bring in from a spreadsheet or another site, and the name of what it came from (a file name, or your username on that site) so you can check it for new things later.
- Invites: the email addresses the owner has invited, and when each person first signed in.
Everything is stored in the United States.
Signing in with Google
If you choose “Continue with Google”, HoardControl receives only your name, email address and profile picture address from Google, and uses only your name and email address, to sign you in. It doesn’t ask for access to your Gmail, contacts, files or anything else in your Google account, and never shares this information or uses it for advertising. HoardControl’s use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.
Who can see your collection
- Other members can’t. Each person’s collection is private to their account, and the database itself enforces this.
- The owner can. As the person who runs HoardControl, the owner receives a weekly backup of everyone’s collections by email (locked with a password; the email shows only a shortened version of your address, like “sa•••@gmail.com”) and keeps each one for 3 months, so that nothing is lost if something goes wrong, and can see the database when fixing a problem. The owner doesn’t look through collections otherwise.
- The people you lend to aren’t sent anything: their names are only for your own records.
Services HoardControl uses
Your information is stored and processed by these services, only to run HoardControl:
- Supabase: the database, sign-in and photo storage.
- Netlify: hosts the website (and keeps the usual short-lived server logs, such as IP addresses).
- Resend: sends sign-in codes, invitations and messages to the owner (such as the weekly backup).
- Cloudflare Turnstile: checks that whoever asks for a sign-in code isn’t a robot.
- Google: only if you sign in with Google (see above).
Looking things up and importing. When you ask HoardControl to find something online, fill in pictures, or import from another site, it sends only what’s needed for that (a title, card or barcode number, or your username on that site) to the public database or site concerned, such as Wikipedia, Open Library, Scryfall, BoardGameGeek, Discogs or Steam. Pictures from those sites are shown straight from them, so they can see that your browser loaded them. Spreadsheets and export files you import are read on your own device; only the rows you import are saved. Settings → Your data & privacy lists exactly which site gets what.
What HoardControl doesn't do
- No advertising, and no selling or renting your information to anyone.
- No analytics or tracking scripts.
- Cookies and browser storage are used only to keep you signed in and to remember your settings and where you were in the app. The name and policy number you type for an insurance report stay in your browser and are never sent to HoardControl.
Your choices
From Settings, at any time, you can:
- get a copy of everything you’ve stored;
- correct anything in your collection or account;
- erase your collection, or delete your account and everything in it straight away (the owner is told that you’ve left).
Or email privacy [at] hoardcontrol [dot] com and it will be done within 30 days. Copies in the owner’s weekly backups are gone within 3 months, and you can ask for them to be removed sooner.
Keeping it safe
Everything travels over secure (HTTPS) connections. HoardControl never uses passwords: you sign in with Google or with a one-time code sent to your email. Uploaded photos are private and shown only through links that expire.
Children
HoardControl isn’t meant for children under 13, and the owner doesn’t knowingly invite them.
Changes
If this policy changes, the date at the top changes too, and members are told about anything important. Questions or requests: privacy [at] hoardcontrol [dot] com.