Privacy

Effective July 13, 2026. Volksdroid is designed to work without an account and to keep personal data collection minimal.

What we store and why

Anonymous favorites and interface preferences are stored only in your browser’s local storage so the catalog remembers your choices. If you sign in, the server stores your normalized email address, hashes of one-time codes and session tokens, saved catalog item records, and account/session timestamps. We do not require a name, password, or profile.

Analytics

The site may use aggregate product analytics to understand page and feature usage. Analytics profiles are created only for identified users; the favorites account does not send its private key or account identifier to analytics.

Export and deletion

Open My stack to download the account data we hold or permanently delete the email account, its sessions, and synced favorites. Authenticated clients can perform the same operations with GET and DELETE requests to /api/account.

Retention

Your account, sign-in-code records, session records, and favorites remain until you delete the account; codes cease to work after ten minutes and sessions cease to work after their configured expiry. Account deletion removes all of those records immediately from the active store. Infrastructure backups, when enabled by the host, expire on the host’s rolling schedule and are not restored except for disaster recovery. Anonymous browser data remains until you clear site data or remove it from My stack. Operational request logs are controlled by the hosting provider and are not joined to favorites accounts.

Session security

Sign-in codes expire after ten minutes and can be used only once. Sessions use a secure, HTTP-only cookie and expire after 30 days by default. Signing out revokes the current session.