True 4K Collections — Privacy Policy
Last updated: October 13, 2026
Developer: Wiser Apps. Contact: wiserappz@gmail.com.
Personal collections and optional accounts
Your Collection and Wishlist remain on your device and work without signing in, including offline. They include titles, editions, ratings, season ratings, viewing and purchase status, dates, Amount Paid, notes, artwork and editor adjustments. Preferences, unfinished drafts and caches may also remain on the device. We do not synchronize personal collections to our service. Google sign-in is required for submitting shared box-set templates, reporting problems, authorized review and optional Community rating contributions. Browsing approved templates and adding independent copies require no account.
Shared templates and artwork
Before submitting, you can preview the shared name, release year and market, description, ordered movies or included seasons, selected TMDB posters, factual edition specifications, disc/case counts, included extras and finished artwork. Personal ratings, viewing/purchase status, acquisition dates, Amount Paid, personal notes and artwork display preferences are excluded. Original photos and editor history are not uploaded. Review shareable text for personal information before submitting. The service validates and re-encodes uploaded artwork. Pending content is private to its contributor and authorized moderators. Approved templates are public. Account emails and Firebase identifiers are not displayed publicly. Reports, reviewer feedback, artwork-source information and sharing-rule acceptance are stored to operate moderation and address complaints.
Google sign-in and Cloudflare
Firebase Authentication processes Google account/profile identifiers, email, name and connection information for authentication and security. We do not receive your Google password. Authentication requests also include Firebase app and SDK/version information and SDK heartbeat dates. A session may remain on your device until sign-out, expiry or revocation; tokens are excluded from collection JSON backups. Cloudflare Workers and Durable Objects process requests, D1 stores shared content and account/review/deletion records, and private R2 holds finished artwork. Shared box-set browsing retrieves approved catalog pages; search words are matched on your device rather than sent as a search query. Opening a template or image sends its identifier to the service. Connection information supports request limits and security; our service does not infer location from it. Providers may keep operational and security records under their policies.
See Firebase privacy information and Cloudflare privacy policy.
Independent personal copies
Imported templates are independent local copies. Shared corrections never overwrite personal edits. Removing shared artwork stops future delivery through our artwork routes, but cannot erase artwork already downloaded into personal copies or exported backups. Local originals and editor adjustments stay local unless you export them or your configured device backup service copies them.
TMDB, hosted search and posters
Online search and metadata use The Movie Database (TMDB). This version sends search terms and requested movie or television identifiers over HTTPS to a Wiser Apps service hosted by Cloudflare. The service requests the required information from TMDB and returns it to the app. The service's TMDB credential is stored as a Cloudflare secret; it is not included in the app or sent to your device. You do not need to supply a personal TMDB credential for this connection.
Cloudflare receives these requests and normal connection information, including your IP address. The service uses IP-based request limits to reduce abuse. It is configured to reuse cached search and connection-check responses for up to one minute and movie or television metadata responses for up to fifteen minutes. The cache uses the requested search terms or title identifiers to find a response. It does not include your Collection or Wishlist records and does not use your IP address as its cache key. These cache durations describe how long the service may reuse a response; they are not promises that Cloudflare or TMDB deletes every provider-level record within that time. Request limits use one-minute counting windows. Wiser Apps has disabled application request logging for the Worker, but Cloudflare may still process network, operational and security information under its own policies.
TMDB receives search terms and requested title identifiers from the service so it can return search results and movie or television metadata. Network providers may also pass ordinary connection information to upstream services. Posters load directly from TMDB's image service, which receives your device's connection information. The app does not upload your Collection or Wishlist records, ratings, edition notes, other notes, or Amount paid as part of these requests. Requesting metadata for a title does disclose the requested title identifier.
TMDB and Cloudflare operate under their own privacy policies: TMDB privacy policy and Cloudflare privacy policy. Wiser Apps does not control their independent retention of request, network, operational or security information.
If you used an earlier version with your own TMDB credential, that credential may remain encrypted on your Android device with a key protected by Android Keystore. This hosted-search version does not use it and does not fall back to it if the hosted service is unavailable. If a previously saved credential is present, Settings shows that it remains protected on the phone and lets you remove it. This hosted-search version does not let you add or use a personal credential for hosted search. Removing a saved credential does not revoke it at TMDB and does not stop hosted search. Earlier personal-credential versions authenticate directly with TMDB using the credential supplied on the device.
Optional Community ratings
You can browse Best Looking Pictures without an account. Participation is off until you sign in and choose Activate participation after reading the in-app explanation. Activation sends eligible ratings already saved on that device, and later rating or collection changes synchronize automatically. Personal collections and ratings remain available locally and offline without participating.
Our Community service receives your Firebase app-account identifier, TMDB movie identifiers, picture-quality and movie-enjoyment ratings, consent version and time, and the revision, request identifiers and timestamps needed to synchronize safely and prevent duplicate votes or abuse. Each account contributes at most one picture vote per movie: its highest eligible saved picture rating across owned 4K Ultra HD copies, including owned box-set members. Movie enjoyment is a separate overall rating across the four supported owned formats; it does not determine picture-quality rank. No personal notes, prices, artwork, watch history or complete collection records are uploaded by Community.
Cloudflare hosts the Community service, its account-associated vote database and recovery records. Firebase verifies sign-in. Public results show movie identifiers, averages, rating counts and ranking information, not account identifiers, names or email addresses. Small samples are labeled Early ratings; these averages can still reveal an individual score when only one person has rated a movie. Archived quarters retain frozen aggregate results without voter identifiers. TMDB supplies movie metadata and posters as described below. Community movie metadata may be cached for up to six hours; it contains movie information rather than account or rating data.
In Community > Participation, choose Turn participation off to stop further rating uploads and withdraw active picture and enjoyment contributions without deleting your app account or personal ratings. If offline, uploads stop locally and withdrawal waits for a confirmed connection; a request is not complete until the app confirms it. Other devices reconcile the account's off state when they connect. Sign-out alone is not a withdrawal. Re-activation requires an explicit choice. Account deletion also removes active Community contributions.
Community retention and recovery
All-time results use each account's latest active votes. Quarterly results use qualifying picture-rating changes during that quarter, not a movie's release date. Private quarter rows are removed after their aggregate archive is sealed, or when participation is turned off or the account is deleted. Archived aggregate results remain available indefinitely without voter identifiers. Turning participation off does not rewrite previously frozen aggregate archives.
Synchronization receipts are retained for up to 90 days and removed on withdrawal or account deletion. Short-lived leaderboard snapshots expire after 15 minutes and are purged by hourly maintenance. Rate-limit counters expire after 24 hours. While participation is off, minimal account-associated consent, revision and off-state records remain so retries, older devices or backup recovery cannot restore withdrawn votes. These records do not retain active rating values. They are removed or superseded on explicit reactivation, or removed during account deletion.
Minimal deletion and recovery-suppression records are kept for at least 31 days after verified account deletion, and longer while a recoverable managed backup or reviewed hold still requires them. Backup restores remain closed to public reads and contributions until deletion and withdrawal records have been reapplied and verified. Our managed export limit and provider-managed recovery periods below also apply to Community. Operator-reviewed account deletion remains subject to the 30-day process below.
External links
If you choose a TMDB, Amazon, Walmart, eBay, Gruv or DigiRaw link, the relevant website opens. Retailer search links can include the title you selected. External services may receive your IP address and other browser information and apply their own privacy policies. The app does not handle purchases made on those websites.
Backups and exports
Collection JSON backups include saved records, box-set membership, ratings, artwork and editable artwork adjustments. CSV is a readable export and is not a complete image backup. JSON exports do not contain sign-in tokens or personal TMDB credentials. Export files are not encrypted by this app; storage and sharing depend on the location you choose. Wiser Apps does not automatically receive them. Android backup/transfer depends on device and provider settings; keep a manual backup. Deleting a sharing account does not delete local files, and uninstalling does not necessarily remove separate backups.
Retention and deletion
We complete verified sharing-account deletion requests within 30 days. Fulfillment is reviewed and performed by an operator; it is not instant or automatic. Rejected or duplicate submissions and resolved reports are retained for 90 days after the final decision. Our managed service exports expire within 30 days of their original snapshot date. Documented recovery, security or legal holds may delay expiry and are reviewed. We retain minimal deletion records through the recovery window to prevent deleted information from returning after a restore. A held backup has not expired; removal from the live service does not mean immediate erasure of every backup.
Provider-managed retention is separate from our service exports. Cloudflare D1 Free recovery history lasts seven days. Firebase documents retention of authentication IP logs for a few weeks and removal of other authentication information from live and backup systems within 180 days after customer-initiated deletion. We verify logical removal of R2 artwork, but do not promise an independently verified deadline for erasure from all provider-internal systems.
In Settings > My submissions, sign in, choose Delete sharing account, then Request account deletion. If you cannot use the app, email wiserappz@gmail.com with the subject “True 4K Collections account deletion.” Do not send passwords or sign-in tokens. We verify ownership before acting. A received request is not confirmation of completed deletion. We remove the Firebase app account and associated hosted submissions, reports, artwork, private Community votes and synchronization records; we do not delete your Google or Gmail account. Your personal collection, collection exports and independent copies already downloaded by others remain unchanged.
Monitoring, support and your choices
The app displays no advertising and does not integrate an analytics or crash-reporting service. Authentication-related technical information is described above. Healthchecks.io receives empty operational success/failure signals, their timing and ordinary connection information, plus our operator email for alerts; we do not send collection records, app-account identifiers, artwork or template content to it. If you email support, our email provider receives your address and message. We keep support messages as needed to resolve the request or meet legal obligations; you can request removal at wiserappz@gmail.com. Do not send credentials or private collection backups without a specific agreed need. You control local records and exported files separately; Wiser Apps cannot retrieve or remotely erase files held only on your device.
Healthchecks privacy information
Intended audience
True 4K Collections is intended for teens and adults aged 13 and older. It is not directed to children under 13. This intended audience is separate from the content rating assigned by a store.
Changes and contact
The policy will be updated if the app's data practices change. Questions can be sent to wiserappz@gmail.com.