Privacy & cookies

Who is responsible

NUMISATO is an independent collecting archive. For questions about your personal data, contact hello@numisato.com.

What we use and why

• Accounts: your email address, account identifier and sign-in/session information provide the passwordless account service you request. Your email address is required for an account; browsing the archive does not require one.
• Your collection: saved record identifiers and owned/wanted choices let you manage and synchronise your private list. These are not a public collector profile.
• Correspondence: when you email us, we receive your address, message and any attachments you choose to send. We use these to answer you, investigate corrections and document image permissions.
• Technical information: hosting, email and authentication providers process request and delivery information, such as IP addresses, timestamps and device/browser information, to deliver and protect their services.

Account and collection processing is necessary to provide the service you request. Our legitimate interests are answering enquiries, maintaining a reliable archive, recording permission to publish content and protecting the service against misuse. We do not use your account email as a newsletter subscription, sell your collection, or make automated decisions with legal or similarly significant effects about you.

Services that process data

We use Supabase for sign-in and cloud collections, Zoho Mail for account emails and correspondence, and OpenAI Sites and Cloudflare for website delivery and security. They receive the data needed for those functions. Authorised NUMISATO administrators may access information where necessary to provide support or maintain the service; other collectors cannot access your account collection.

The collection database is configured in Paris, EU, and our Zoho account uses its EU service. This does not mean every provider operation takes place exclusively in the EU. Providers may process support or operational data internationally. Their applicable transfer arrangements, including standard contractual clauses where relevant, are described in their documentation: Supabase transfers, Zoho privacy, OpenAI privacy and Cloudflare privacy. Contact us for questions about the safeguards relevant to your data.

Cookies and browser storage

Without signing in, your owned/wanted list is stored locally in this browser. Comparison selections and interface preferences may also be stored here. When you sign in, authentication information is stored in this browser to keep your session active. Signing out ends this device’s session; it does not delete your cloud collection. Your local list is only imported into your account when you choose to import it.

NUMISATO does not add advertising trackers or analytics. Our delivery providers may use security cookies, including Cloudflare bot-protection cookies. Essential account and security storage is used to deliver the requested service, not to build advertising profiles. You can clear website data in your browser; export your local collection first if you want to keep it. Clearing browser data does not delete cloud account data.

How long information is kept

Account details and cloud collection entries are kept while your account exists. To request deletion, email us from your account address. After verifying the request, we remove the account and its associated collection, unless specific information must be retained for a legal obligation or a necessary legal claim. Signing out alone does not request deletion.

Enquiry correspondence is retained while needed to resolve the enquiry and any related follow-up or dispute. Permission records and agreed contributor credits are retained while we rely on that permission and as needed to establish the lawful use of published material. Technical logs and backup copies have separate provider-controlled retention and rotation; deleting live data may not immediately remove every backup copy. You can ask us about retention relevant to your request.

A local browser list remains until you clear it or your browser removes it. Downloaded backup files remain under your control.

Your choices and privacy rights

You can change owned/wanted entries and export your collection on My collection. Contact hello@numisato.com to request access, correction, deletion, restriction or portability of personal data, or to object to processing based on legitimate interests. These rights apply subject to their legal conditions. If we rely on consent for an optional use, you may withdraw that consent without affecting earlier lawful processing.

We may need to verify your identity before handling a request. We normally respond within one month; if a lawful extension is needed, we will explain it. You may complain to the Dutch Autoriteit Persoonsgegevens or your local data-protection authority.

External links and updates

Maker, seller and source links lead to independent websites with their own privacy practices. Contact links open your email app. This notice will be updated when the service or its use of personal data changes; the date above identifies the current notice.