Privacy Policy

Last updated: 2 November 2026

This Privacy Policy explains how the website collectibles.wiki and Oozaruu, the Collectibles Wiki mobile app for Android and iOS (package and bundle identifier wiki.collectibles.app, published on Google Play and the App Store by YOOLK SASU) process personal data.

collectibles.wiki and the Oozaruu app are developed, published and operated by YOOLK SASU, Bâtiment C, 20 boulevard Mireille Jourdan Barry, 13008 Marseille, France, RCS Marseille 948 155 825 (“we”, “us”, or “our”), which is the data controller.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact: privacy@collectibles.wiki

1. Scope

This Privacy Policy applies to personal data processed through collectibles.wiki, including when you:
– browse the website;
– use the Oozaruu mobile app for Android or iOS;
– create or use an account;
– bookmark themes or toys;
– create folders or collection tracking records;
– submit entries, edits, or reports;
– contact us; or
– interact with moderation or abuse-handling processes.

2. What Data We Collect

Depending on how you use the Service, we may collect the following categories of data:

a. Account data
– username;
– email address;
– password-related authentication data;
– profile settings and preferences.

b. Service usage data
– bookmarks, folders, and collection tracking records;
– submission history, drafts, edits, moderation status, and reports;
– messages you send to us or to moderators through the Service.

c. Technical and security data
– IP address;
– browser, device, operating system, and basic technical identifiers;
– server logs, access timestamps, and security events;
– cookie or session identifiers necessary for authentication, preferences, and site security.

d. Public contribution data
– content you submit for publication;
– attribution name or username attached to public contributions;
– timestamps and moderation metadata.

e. Oozaruu app data
– the device name shown under “Connected devices” (set by your phone; you can remove the session at any time);
– the app version and platform, sent with each request so that versions which are no longer safe can be refused;
– photos you choose with the camera or from your photo library, only when you send them for a toy. The app never reads your library on its own and keeps nothing after sending;
– sign-in tokens, stored in the secure storage of your phone (Keychain on iOS, Keystore on Android) and revocable at any time from “Connected devices” on the website or in the app.

The app contains no advertising, no analytics and no third-party tracking SDK, and does not ask iOS for tracking permission.

f. Sign-in with Google or Apple
– if you choose to sign in with Google or Apple, the stable account identifier, email address and name sent by that provider, used only to sign you in and to link that sign-in to your account.

3. How We Use Your Data

We use personal data to:
– create and manage user accounts;
– provide bookmarking, folder, and collection tracking features;
– review, validate, publish, reject, edit, or remove submissions;
– maintain the integrity, security, and performance of the Service;
– detect spam, abuse, infringement, fraud, and unauthorized access;
– respond to legal notices, rights claims, and support requests;
– comply with legal obligations; and
– communicate with you about the Service, your account, moderation decisions, or important changes.

We do not use your personal data for advertising profiling or behavioral ad targeting.

4. Legal Bases

Depending on the context, we process personal data on one or more of the following legal bases:
– performance of a contract, when processing is necessary to provide your account and the core Service;
– legitimate interests, including operating a community reference site, securing the Service, preventing abuse, enforcing rules, handling rights claims, and improving reliability;
– legal obligation, where retention or disclosure is required by applicable law; and
– consent, where we specifically ask for it for an optional feature or communication.

5. Cookies and Similar Technologies

collectibles.wiki is designed to avoid advertising and unnecessary tracking.

We may use only limited cookies or similar technologies that are strictly necessary or functionally useful for:
– logging you in;
– remembering basic preferences;
– maintaining session security;
– preventing abuse; and
– keeping the Service operational.

We do not use advertising cookies or sell personal data for cross-site advertising.

If we later introduce optional analytics or non-essential cookies, we will update this Policy and, where required, ask for consent before using them.

6. Public and Private Areas

Your private account features, such as personal folders, bookmarks, and collection tracking records, are not intended to be public by default unless the Service expressly states otherwise.

By contrast, content you submit for community publication may become publicly visible if approved, together with your chosen attribution or username unless we decide or are required to anonymize it.

7. Who Receives Your Data

We may share personal data only where necessary with:
– hosting, infrastructure, email, storage, security, or anti-abuse providers acting on our behalf;
– moderators or administrators with a need to review or manage content and reports;
– legal advisers, authorities, or rights holders where disclosure is legally required or reasonably necessary to address rights claims, unlawful content, fraud, or abuse; and
– service providers involved in backup, delivery, or technical maintenance under appropriate confidentiality and data protection obligations.

We do not sell or rent your personal data.

8. International Transfers

If service providers process data outside the European Economic Area, we will rely on an adequacy decision or other appropriate safeguards recognized by applicable data protection law.

9. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including legal, security, moderation, and record-keeping needs.

In general:
– account data is kept for as long as your account remains active, and for a limited period thereafter where needed for security, dispute handling, or legal compliance;
– public contribution records may be retained longer to preserve the integrity and history of the encyclopedia;
– server logs and security logs are typically retained for a limited period appropriate for security and abuse prevention; and
– legal notices, moderation records, and abuse reports may be retained for as long as reasonably necessary to establish, exercise, or defend legal claims.

10. Your Rights

Subject to applicable law, you may have the right to:
– access your personal data;
– rectify inaccurate or incomplete data;
– request deletion of your data;
– request restriction of processing;
– object to certain processing based on legitimate interests;
– request portability of data you provided to us where applicable; and
– withdraw consent at any time where processing is based on consent.

You can delete your account from the app (Profile › Delete my account) or from your profile on the website. Both send a confirmation link by email; once confirmed, your account and your app sessions are deleted. To request deletion without signing in, write to privacy@collectibles.wiki from the email address of your account. See also Delete your account.

You also have the right to lodge a complaint with the CNIL or another competent data protection authority.

11. Children

The Service is not intended to be used independently by children below the age permitted by applicable law.

In France, if consent is required for a specific processing activity, children under 15 may need parental or guardian authorization. If you believe a child has provided personal data in violation of applicable rules, please contact us so we can review the situation.

12. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Third-Party Links and Content

The Service may contain links to third-party websites, brands, archives, or external sources. We are not responsible for the privacy practices of third-party services.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version becomes effective when posted on the Service.

15. Contact

Data controller:
YOOLK SASU
Bâtiment C, 20 boulevard Mireille Jourdan Barry, 13008 Marseille, France
privacy@collectibles.wiki