True 4K Collections — Privacy Policy

Last updated: October 6, 2026

Developer: Wiser Apps. Contact: wiserappz@gmail.com.

Personal collections and optional accounts

Your Collection and Wishlist remain on your device and work without signing in, including offline. They include titles, editions, ratings, season ratings, viewing and purchase status, dates, Amount Paid, notes, artwork and editor adjustments. Preferences, unfinished drafts and caches may also remain on the device. We do not synchronize personal collections to our service. Google sign-in is required for submitting shared box-set templates, reporting problems and authorized review. Browsing approved templates and adding independent copies require no account.

Shared templates and artwork

Before submitting, you can preview the shared name, release year and market, description, ordered movies or included seasons, selected TMDB posters, factual edition specifications, disc/case counts, included extras and finished artwork. Personal ratings, viewing/purchase status, acquisition dates, Amount Paid, personal notes and artwork display preferences are excluded. Original photos and editor history are not uploaded. Review shareable text for personal information before submitting. The service validates and re-encodes uploaded artwork. Pending content is private to its contributor and authorized moderators. Approved templates are public. Account emails and Firebase identifiers are not displayed publicly. Reports, reviewer feedback, artwork-source information and sharing-rule acceptance are stored to operate moderation and address complaints.

Google sign-in and Cloudflare

Firebase Authentication processes Google account/profile identifiers, email, name and connection information for authentication and security. We do not receive your Google password. Authentication requests also include Firebase app and SDK/version information and SDK heartbeat dates. A session may remain on your device until sign-out, expiry or revocation; tokens are excluded from collection JSON backups. Cloudflare Workers and Durable Objects process requests, D1 stores shared content and account/review/deletion records, and private R2 holds finished artwork. Shared box-set browsing retrieves approved catalog pages; search words are matched on your device rather than sent as a search query. Opening a template or image sends its identifier to the service. Connection information supports request limits and security; our service does not infer location from it. Providers may keep operational and security records under their policies.

See Firebase privacy information and Cloudflare privacy policy.

Independent personal copies

Imported templates are independent local copies. Shared corrections never overwrite personal edits. Removing shared artwork stops future delivery through our artwork routes, but cannot erase artwork already downloaded into personal copies or exported backups. Local originals and editor adjustments stay local unless you export them or your configured device backup service copies them.

TMDB, hosted search and posters

Online search and metadata use The Movie Database (TMDB). This version sends search terms and requested movie or television identifiers over HTTPS to a Wiser Apps service hosted by Cloudflare. The service requests the required information from TMDB and returns it to the app. The service's TMDB credential is stored as a Cloudflare secret; it is not included in the app or sent to your device. You do not need to supply a personal TMDB credential for this connection.

Cloudflare receives these requests and normal connection information, including your IP address. The service uses IP-based request limits to reduce abuse. It is configured to reuse cached search and connection-check responses for up to one minute and movie or television metadata responses for up to fifteen minutes. The cache uses the requested search terms or title identifiers to find a response. It does not include your Collection or Wishlist records and does not use your IP address as its cache key. These cache durations describe how long the service may reuse a response; they are not promises that Cloudflare or TMDB deletes every provider-level record within that time. Request limits use one-minute counting windows. Wiser Apps has disabled application request logging for the Worker, but Cloudflare may still process network, operational and security information under its own policies.

TMDB receives search terms and requested title identifiers from the service so it can return search results and movie or television metadata. Network providers may also pass ordinary connection information to upstream services. Posters load directly from TMDB's image service, which receives your device's connection information. The app does not upload your Collection or Wishlist records, ratings, edition notes, other notes, or Amount paid as part of these requests. Requesting metadata for a title does disclose the requested title identifier.

TMDB and Cloudflare operate under their own privacy policies: TMDB privacy policy and Cloudflare privacy policy. Wiser Apps does not control their independent retention of request, network, operational or security information.

If you used an earlier version with your own TMDB credential, that credential may remain encrypted on your Android device with a key protected by Android Keystore. This hosted-search version does not use it and does not fall back to it if the hosted service is unavailable. If a previously saved credential is present, Settings shows that it remains protected on the phone and lets you remove it. This hosted-search version does not let you add or use a personal credential for hosted search. Removing a saved credential does not revoke it at TMDB and does not stop hosted search. Earlier personal-credential versions authenticate directly with TMDB using the credential supplied on the device.

External links

If you choose a TMDB, Amazon, Walmart, eBay, Gruv or DigiRaw link, the relevant website opens. Retailer search links can include the title you selected. External services may receive your IP address and other browser information and apply their own privacy policies. The app does not handle purchases made on those websites.

Backups and exports

Collection JSON backups include saved records, box-set membership, ratings, artwork and editable artwork adjustments. CSV is a readable export and is not a complete image backup. JSON exports do not contain sign-in tokens or personal TMDB credentials. Export files are not encrypted by this app; storage and sharing depend on the location you choose. Wiser Apps does not automatically receive them. Android backup/transfer depends on device and provider settings; keep a manual backup. Deleting a sharing account does not delete local files, and uninstalling does not necessarily remove separate backups.

Retention and deletion

We complete verified sharing-account deletion requests within 30 days. Fulfillment is reviewed and performed by an operator; it is not instant or automatic. Rejected or duplicate submissions and resolved reports are retained for 90 days after the final decision. Our managed service exports expire within 30 days of their original snapshot date. Documented recovery, security or legal holds may delay expiry and are reviewed. We retain minimal deletion records through the recovery window to prevent deleted information from returning after a restore. A held backup has not expired; removal from the live service does not mean immediate erasure of every backup.

Provider-managed retention is separate from our service exports. Cloudflare D1 Free recovery history lasts seven days. Firebase documents retention of authentication IP logs for a few weeks and removal of other authentication information from live and backup systems within 180 days after customer-initiated deletion. We verify logical removal of R2 artwork, but do not promise an independently verified deadline for erasure from all provider-internal systems.

In Settings > My submissions, sign in, choose Delete sharing account, then Request account deletion. If you cannot use the app, email wiserappz@gmail.com with the subject “True 4K Collections account deletion.” Do not send passwords or sign-in tokens. We verify ownership before acting. A received request is not confirmation of completed deletion. We remove the Firebase app account and associated hosted submissions, reports and artwork; we do not delete your Google or Gmail account. Your personal collection, collection exports and independent copies already downloaded by others remain unchanged.

Account-deletion instructions

Monitoring, support and your choices

The app displays no advertising and does not integrate an analytics or crash-reporting service. Authentication-related technical information is described above. Healthchecks.io receives empty operational success/failure signals, their timing and ordinary connection information, plus our operator email for alerts; we do not send collection records, app-account identifiers, artwork or template content to it. If you email support, our email provider receives your address and message. We keep support messages as needed to resolve the request or meet legal obligations; you can request removal at wiserappz@gmail.com. Do not send credentials or private collection backups without a specific agreed need. You control local records and exported files separately; Wiser Apps cannot retrieve or remotely erase files held only on your device.

Healthchecks privacy information

Intended audience

True 4K Collections is intended for teens and adults aged 13 and older. It is not directed to children under 13. This intended audience is separate from the content rating assigned by a store.

Changes and contact

The policy will be updated if the app's data practices change. Questions can be sent to wiserappz@gmail.com.