Privacy Policy

← Back to Settings

Privacy Policy

Effective date: 30 October 2026 · Version 1.0

This policy explains how VERcity handles personal data when you browse the coin catalogue, create an account and manage your collection. VERcity is operated by Igor Pogodin. Contact for privacy questions and requests: igor.pogodin@vercity.net.

1. Data we process

  • Account information: email address, user identifier and authentication/session information. When you choose Google sign-in, Google may also provide your profile name and picture and the identifiers needed to authenticate you. We do not receive your Google password.
  • Information you enter: collection and Wishlist records, coin condition, purchase/sale dates and prices, notes, and your private seller/buyer directory. Do not enter sensitive personal information or unnecessary information about other people in notes or contact names.
  • Technical information: IP address, browser/device information and service/security logs processed by our infrastructure providers.
  • Privacy preferences: your analytics choice, its date and the version of the consent notice, stored in your browser.

2. Purposes and legal bases

We process account and collection data to provide the service you request and perform our agreement with you. We use technical information as necessary to maintain security, investigate abuse and keep the service reliable, relying on legitimate interests where applicable. We may retain information to meet applicable legal obligations. Optional Google Analytics is based on your consent. Refusing or withdrawing analytics consent does not prevent you from using the catalogue, signing in or managing your collection.

3. Essential browser storage

Supabase authentication uses browser storage to maintain your signed-in session. VERcity also remembers the email used during an email-code sign-in, catalogue navigation position and your privacy choices. These functions support the service rather than advertising. Your privacy choice expires after 180 days or when the consent notice changes. Signing out and clearing browser storage can remove local information; account records stored on our servers are not deleted by clearing your browser.

4. Optional Google Analytics

If you allow analytics, we load Google Analytics 4, provided by Google, to understand website usage and improve VERcity. It can process page views, timestamps, device/browser information, cookie identifiers and network information. Our page-view events use the page path without search parameters or fragments. We do not attach account emails, personal collection records, search text, sign-in codes or authentication tokens to these events.

We use Basic Consent Mode v2. The Google tag is blocked before opt-in and when consent is refused. Analytics storage is granted only after your permission; advertising storage, advertising user data and advertising personalisation remain denied. Google Signals and advertising personalisation signals are disabled in the tag configuration. VERcity does not currently run advertising or install Yandex Metrica.

Google Analytics may use _ga and related _ga_* cookies. The configured cookie lifetime is up to 180 days and may be renewed during permitted visits; browsers may impose shorter limits. Retention of information processed by Google also depends on the Analytics property settings. See Google’s Privacy Policy and how Google uses information from partner sites.

5. Choosing and withdrawing consent

The privacy notice lets you allow analytics, reject optional processing or manage your choice. You can reopen it at any time in Settings → Personal data & consent. Withdrawal stops future Analytics measurement in this browser and removes accessible Analytics cookies. It does not undo processing that lawfully occurred before withdrawal. Choices are specific to your browser/device and are not synchronised across your account. If browser storage is blocked, your choice may only last for the current page.

6. Service providers and international processing

VERcity uses Supabase for authentication, database and image storage, and Vercel for hosting and delivery. Google processes authentication information when you select Google sign-in and Analytics information only when analytics is allowed. Flag images may be delivered by FlagCDN, which receives the technical information needed to serve an image. These providers process information under their applicable terms and privacy notices. We do not sell personal data or provide collection records to advertisers.

Depending on provider configuration and operations, information may be processed outside your country, including outside the EEA. Where applicable, international transfers require a recognised legal mechanism, such as an adequacy decision or standard contractual clauses. Contact us for information about the safeguards relevant to your data.

7. Retention and deletion

Account and collection information is retained while needed to provide your account and requested features. You can edit or remove individual records in the service and request deletion of your account by email. After an account-deletion request is verified, information is removed unless continued retention is needed for a legal obligation, security investigation or legal claim. Deleted information may remain in restricted backups until they rotate under the providers’ retention schedules. Service/security logs are kept for the periods configured by the relevant providers and as needed for the purposes described above.

8. Your rights

Where applicable law provides these rights, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time and complain to the data-protection authority in your country of residence, workplace or where an alleged infringement occurred. Send requests to igor.pogodin@vercity.net. We may need to verify your identity and will respond within applicable legal time limits.

9. Children and policy changes

VERcity is not directed at children below the age at which they may independently consent to online services under applicable law. If you believe a child’s information has been submitted improperly, contact us. We may update this policy as the service changes and will request new consent when changes to optional processing require it.