Privacy Policy

The controller of your personal data is the team operating Tomorrowland Collectors. For any privacy request or question, contact us via the contact page.

Depending on how you use the site, we may process:

• Account data. Email address, password (stored hashed), display name and, if you sign in with a social provider, the identifiers and profile fields that provider returns.
• Profile data. Display name, country, avatar, biography and visibility preferences you choose.
• Contribution data. Objects, photographs, descriptions, notes, condition, provenance and any other information you submit to the archive, together with the associated submission and moderation records.
• Collection & watchlist data. The items you add to your personal collection or watchlist and any private notes attached to them.
• Communications. Messages you send us via the contact form or by email.
• Technical data. IP address, user agent, device and browser information, referring URL and pages viewed — collected for security, abuse prevention and, with your consent, aggregate analytics.
• Consent records. The cookie and marketing choices you make, together with the date they were recorded.

• To provide the archive — creating your account, letting you submit items and manage your collection. Legal basis: performance of a contract with you (Art. 6(1)(b) GDPR).
• To moderate contributions and keep the archive accurate and lawful. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
• To secure the service — detecting abuse, fraud and unauthorized access. Legal basis: legitimate interests and legal obligation.
• To measure usage with analytics cookies. Legal basis: your consent (Art. 6(1)(a) GDPR).
• To send transactional emails (sign-in, password reset, submission status). Legal basis: performance of a contract.
• To comply with the law and respond to lawful requests. Legal basis: legal obligation.

We use strictly necessary cookies to make the site work (session, authentication, security, consent record). With your consent we may also use preference, analytics and marketing cookies. Full details, categories and controls are described on our Cookie Policy. You can change or withdraw your consent at any time:

We do not sell your personal data. We share it only with:

• Infrastructure providers that host the site, database, authentication and file storage, acting as processors under a data-processing agreement.
• Email delivery providers that send transactional messages such as sign-in and password reset emails.
• Analytics providers, only if you have consented to analytics cookies.
• Authorities, if we are legally required to disclose data (for example under a court order).

Some processors are located outside the European Economic Area. In that case transfers are protected by Standard Contractual Clauses or an adequacy decision of the European Commission.

Contributions you submit and choose to publish (objects, photographs, descriptions) are publicly visible on the archive. Do not include personal data of others in your submissions unless you have their permission and a lawful basis to share it. You can control the visibility of your profile, collection and watchlist in your account settings.

• Account data: for as long as your account exists. When you delete your account, we delete or anonymize it within 30 days, except where retention is required by law.
• Published contributions: kept as part of the archive record; on request we remove your name from the credit and detach the contribution from your account.
• Consent records: up to 24 months to demonstrate compliance.
• Server & security logs: up to 12 months.
• Support emails: up to 24 months after the last message.

Under the GDPR you have the right to:

• access your personal data and receive a copy;
• have inaccurate data corrected;
• have your data erased where the legal grounds apply;
• restrict or object to certain processing, including profiling;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting past processing;
• lodge a complaint with your national data-protection authority — in Belgium this is the Gegevensbeschermingsautoriteit / Autorité de protection des données.

To exercise any of these rights, contact us via the contact page. We reply within 30 days.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), encryption at rest, hashed passwords, role-based access control and audit logging. No online service can guarantee absolute security; please choose a strong, unique password and keep it confidential.

The archive is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy to reflect changes to the service or the law. When we make material changes we will notify you in-app or by email where appropriate. The "Last updated" date at the top of this page always reflects the current version.

Questions about this policy or how we handle your data? Reach out via the contact page.