DiscVault Privacy Policy

English Nederlands

Last updated: 16 July 2026  ·  Applies to: DiscVault for iOS, iPadOS, and Android

1. Who we are

This app is published by DiscVault — Flux76 (“DiscVault”, “we”, “us”). For any privacy question or request, contact us at privacy@discvault.eu. For the purposes of the EU General Data Protection Regulation (GDPR), DiscVault — Flux76 is the data controller for the limited MovieVault processing described in Section 4. MovieVault is a service managed by Flux76, which also manages DiscVault. Direct TMDB requests are processed by TMDB under its own privacy policy and are not received by us.

2. Our privacy principles

• Local-first. The core app works fully offline, storing your library on your device.
• No account required. You can use the app without signing up or giving us any personal details.
• No tracking. No analytics SDKs, no advertising, no profiling, no data brokers.
• Standalone. The app does not upload or sync your collection, watchlist, or watch history.
• Data minimisation. MovieVault receives only what it needs to answer “what disc is this?”. If you configure TMDB, the app contacts TMDB directly and does not route that request through us.

3. Data stored on your device

The following is stored locally on your device and is not sent to us:

• Your library — the titles, box sets, disc formats, watchlist, and watch history you add.
• App preferences — display and filtering settings you choose.
• Credentials in secure platform storage — such as the iOS Keychain or Android Keystore. For MovieVault, this includes a device-only cryptographic key, a randomly generated device identifier, and a service token. If you configure TMDB, it also includes the API key you provide (see Section 4). These values are only accessible to the app on this device.

Deleting the app removes this local data from your device, subject to any device or platform backup you have enabled. Those backups are controlled by you and your platform provider, not by us.

4. Metadata services (MovieVault and optional TMDB)

MovieVault lookups

To request the limited title metadata needed to identify and catalogue a disc, all app versions can contact our MovieVault metadata service at https://movies.vaultstack.eu over HTTPS. This is the only online service operated by us that the app contacts. It is used when you scan a barcode or when you search for a title by name while adding it manually.

What is sent to MovieVault:

• The barcode number you scan, or the search text you type.
• A randomly generated device identifier and a device public key that the app creates on first use, plus the service token, app name, app version, and platform (“ios”, “ipados”, or “android”). These let the service authenticate the app and rate-limit abuse.

What is not sent to MovieVault:

• Your name, email address, Apple ID, Google account, store account, or any DiscVault account.
• Your collection, watchlist, or watch history.
• Your TMDB API key or any direct TMDB request.
• Your device’s advertising identifier, location, or contacts.

The device identifier is random and not derived from you or your hardware; it is not linked to your real-world identity. MovieVault aggregates metadata from public sources server-side and returns a single result to the app. Legal basis under the GDPR: our legitimate interest (Art. 6(1)(f)) in providing the lookup feature you requested and protecting the service from abuse. We do not use this data for advertising or profiling.

For Apple’s App Store privacy label and Google Play’s Data safety disclosure, where applicable, this random identifier is disclosed as a device or other identifier collected only to operate and rate-limit the lookup service. It is not linked to your identity and is not used for tracking.

Optional direct TMDB lookups

If you add your own TMDB API key, the app stores it only on your device in secure platform storage and sends lookup requests directly to TMDB over HTTPS. The request contains your API key and the title details needed for the lookup. The key and request do not pass through DiscVault, Flux76, or MovieVault. We do not receive or store your TMDB key or your TMDB lookup history.

TMDB may receive standard network and API usage information, including your IP address, and processes that information under its own Privacy Policy. Removing the key disables direct TMDB lookups. Using MovieVault does not require a TMDB key.

5. Camera

The app asks for camera access only so you can scan a disc’s barcode when adding a title. Scanning is performed on your device using the platform’s on-device barcode-scanning functionality. Camera images are processed on-device and are not stored by the app or transmitted anywhere; only the decoded barcode number is sent to MovieVault for the lookup you request (see Section 4). You can decline camera access and add titles manually instead.

6. What we do not do

• We do not collect analytics or usage statistics.
• We do not show advertising or use advertising identifiers.
• We do not use third-party tracking or profiling SDKs.
• We do not sell or share your data with data brokers.
• We do not access your location, contacts, photos, or microphone.

7. Data retention

We do not retain a copy of your library. Local data remains on your device until you delete it or uninstall the app. Your optional TMDB key remains in secure storage on your device until you remove it or uninstall the app; DiscVault and Flux76 do not receive or store it. MovieVault keeps only the minimal operational records (such as the random device credential and short-lived request and security logs) needed to run and secure the lookup service, for no longer than necessary. TMDB determines its own retention under its privacy policy.

8. International transfers

MovieVault is hosted in the European Union. If you use the app from outside the EU, your MovieVault barcode or search request is processed on EU-based infrastructure. If you configure TMDB, the app sends that request directly to TMDB, which may process data in the locations described in its privacy policy. DiscVault and Flux76 do not route or copy the direct TMDB request.

9. Children’s privacy

DiscVault is a general-audience collection tool and is not directed at children. It does not knowingly collect personal information from children.

10. Your rights

Because the app is local-first and we hold almost no personal data about you, most data control is directly in your hands: delete titles in the app, or uninstall to remove everything locally. Where the GDPR applies, you have rights of access, rectification, erasure, restriction, objection, and portability regarding any data we do process. To exercise these rights, or to reset your MovieVault device link, contact privacy@discvault.eu. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens). For information TMDB processes independently, exercise your rights with TMDB as described in its privacy policy.

11. Third-party metadata and artwork

Titles, descriptions, and cover art returned by MovieVault or TMDB originate from third-party sources and belong to their respective owners. They are provided to help you catalogue discs you own and are shown for identification purposes only.

12. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected on this page with a new “Last updated” date. Continued use of the app after an update means you accept the revised policy.

13. Contact

DiscVault — Flux76
privacy@discvault.eu

Terms of Use Back to DiscVault