Effective date: August 17, 2026
Coral Chest ("we," "us," or "our") takes your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding your data when you use coralchest.com (the "Service").
Account information
When you sign up we collect your email address, username, and password (stored as a secure hash — we never store your raw password). If you sign in with Google, we receive your name and email from Google but not your Google password.
Profile information
Information you choose to add to your public profile: display name, bio, location, specialty tags, and shop details.
Specimen and collection data
Coral names, species, categories, origin, keeper notes, RF lineage codes, and any other information you enter about your collection.
Photos
Photos you upload are stored on Amazon Web Services S3. Photos are reviewed before being made publicly visible.
Usage data
We may collect standard server log data including your IP address, browser type, pages visited, and timestamps when you use the Service. This data helps us diagnose issues and improve the product.
We do not sell your personal information to third parties. We do not use your data for advertising targeting or behavioral profiling.
We use the following third-party services to operate Coral Chest. Each has its own privacy policy governing how they handle data:
Your collection, profile, and approved photos are public by default — anyone can view them, including search engines. Keeper notes, RF codes, and lineage records are also public and associated with your username.
Your email address and password are never made public.
We use cookies to keep you signed in between visits. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but doing so will prevent you from staying signed in.
We retain your account data for as long as your account exists. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or operational reasons. Photos stored on S3 will also be removed within 30 days of account deletion.
Depending on where you live, you may have the right to:
To exercise any of these rights, email contact@coralchest.com. We will respond within 30 days.
Coral Chest is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us immediately and we will delete it.
We use industry-standard practices to protect your data, including encrypted connections (HTTPS), hashed passwords, and access-controlled storage. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and notify registered users by email. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions or concerns about this Privacy Policy? Contact us at contact@coralchest.com.