Privacy Policy

Data Collection

We process the information you provide to use COINDEX, including account identifiers, album titles and descriptions, uploaded media, and folder names. Account and upload records associate content with the account that created or uploaded it. We also process technical information for authentication, upload limits, reliability and abuse prevention, including request timestamps, an IP-derived hash and the country reported by our hosting service. For assistant requests, that network information describes the requesting server. Website usage analytics and error reports help us maintain and improve the service.

Photo Uploads

Our browser photo-upload flow redraws images before uploading to remove embedded metadata. Photos supplied by an assistant as public URLs are downloaded by our server; JPEG metadata is removed on the server before storage. This is a different path from a browser upload, and we do not promise that every metadata format is removed from every image or video.

We store media and its content hash, file type, size and available filename or label, together with account and IP-derived upload identifiers. We use this information to display albums, avoid duplicate uploads and apply upload limits. Anyone with an album share link can view its media, even when the album is placed in a private folder.

AI Assistants and Connected Apps

You can let an AI assistant, such as ChatGPT, act on your COINDEX account, either by signing in to it with COINDEX (OAuth) or by giving it a connector key from Settings. It can create albums, add photos to your albums, list your albums, and create or organize private album folders. We process the tool inputs needed for those requests: album titles and descriptions, public image URLs and downloaded photos, folder names and album-to-folder relationships. Albums and folders remain associated with your COINDEX account. Folder names are private to your account; an album's share link still allows anyone with that link to view it.

When an assistant gives us a public image URL, our server downloads that image and stores it in your album. The public image host receives our download request. We store the access and refresh tokens that let a connected app act for you as one-way hashes. Connector-key records keep a hash and the last four characters; an encrypted copy for revealing a new key is cleared after its first successful use or revocation. The assistant also receives what its requests return, such as album titles, share links, photo counts, expiry information, folder names and public market data, and the assistant's provider handles that under its own privacy policy.

You can disconnect an app at any time in Settings → AI agent connectors → Connected apps, which revokes its access. You can revoke connector keys in the same place. Revoking access does not delete albums, photos or folders you already created. You can manage and delete that content through COINDEX; the ChatGPT plugin does not provide a delete tool.

Seller Storefronts

Sellers with a COINDEX storefront give us a notification email address during setup, and we store it in plain text on their seller record. This is the one place we hold an email address we can read: your account email is stored only as a one-way hash, which is why a storefront needs its address typed in separately. It is used only to tell a seller that a cart arrived, and it is deleted if seller access is removed.

Buyers can submit a cart without an account. A submitted cart stores the items, the total, and an optional note to the seller; the form does not ask for a name, contact details or payment information. We store an IP-derived hash to rate-limit cart submissions. This technical identifier is not a promise that the submission is anonymous.

COINDEX never handles payment for these sales. Buyers and sellers settle directly, in whatever channel they already use.

AI Training Data

Your photos are never used for AI training unless you explicitly opt in via your profile settings. You can change that preference in your profile settings.

Third Parties

We do not sell your data. Cloudflare provides hosting, request processing, database and media storage for COINDEX. The website uses Google Analytics for usage measurement. These providers process information needed for their services. An assistant you connect receives the results of the tools it calls and processes them under its provider's privacy policy. A public image host receives a request when we download an image URL you provide. Affiliate links may be used to support the platform.

Retention and Deletion

Albums created through an assistant use your account's default expiration setting. A setting with no expiry keeps an album until you delete it; a selected expiration date makes it eligible for our scheduled cleanup. Deleting or cleaning up an expired album removes its photo records and attempts to remove the stored media, while retaining the album record, including its title, description, account association and technical identifiers, marked as deleted. There is currently no automatic deletion period for that retained album record. Folder records remain until the folder is deleted; deleting a folder does not delete its albums.

OAuth access tokens expire after one hour and refresh tokens after 90 days. Expiration and revocation prevent further use; they do not immediately remove the stored connection records. Some used or expired token records are cleaned up during subsequent successful refreshes, and there is no automatic deletion period for all revoked connection or connector-key records.

Media responses request a cache lifetime of up to one year. Deleting stored media does not instantly withdraw copies already cached, downloaded or shared. Cloudflare's built-in database recovery history can retain deleted records for up to 30 days, and its Workers Logs can retain operational logs for up to seven days. These recovery and log periods are separate from the retention of active records described above.

Google Analytics uses its default two-month retention period for detailed user and event data. Standard aggregated reports are not limited by this setting, and new activity can reset the retention period for user identifiers. Expired detailed data is removed through Google's monthly deletion process.

For questions about retained information or a deletion request, use our contact form.

Advertising

COINDEX no longer displays Google AdSense ads, and sets no Google advertising cookie. The site is funded by donations. Some outbound product links are affiliate links, including the eBay Partner Network, which may earn COINDEX a commission at no additional cost to you.

Contact

Questions about privacy? Visit our Help Center or reach out on Discord.