Privacy Policy
Last updated: October 28, 2026
Who we are
MineralCache, LLC ("MineralCache," "we," "us," or "our") operates a multi-vendor marketplace
for minerals, fossils, crystals, gemstones, and related goods (the "Services"). Contact:
privacy@mineralcache.com; MineralCache, LLC · P.O. Box 5, Llano, TX 78643, USA.
Scope
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit
our websites or Android app, create an account, buy or sell on MineralCache, participate in auctions, use GeoCache features,
contact support, or otherwise interact with the Services.
Information we collect
- Account and profile information: name, username, email address, phone number, account credentials, date-of-birth verification status, communication preferences, and information you provide in your profile or support requests.
- Order, auction, and fulfillment information: billing and shipping details, order history, auction activity, shipment tracking details, refund or dispute records, and communications needed to complete marketplace transactions.
- Vendor information: business, payout, tax, identity, onboarding, listing, listing media, subscription consent, subscription invoice and paid-through status, billing adjustment, and compliance information submitted or generated in connection with vendor review and marketplace operations.
- Member subscription information: saved billing address, subscription consent, enrollment and lifecycle status, invoice and paid-through status, payment-method summary, tax treatment, billing adjustment, refund, and dispute information submitted or generated in connection with an optional paid Member plan.
- Payment information: payments are processed through Stripe and related payment services. We do not store full card numbers or card security codes on MineralCache.
- Support and communications information: messages, attachments, reports, and other information you send to us or we send to you about your account, purchases, listings, auctions, legal updates, or support issues.
- Automatically collected technical information: IP address, browser and device information, operating system, timestamps, page or feature usage, referrer information, error logs, security-related activity, and, when you allow optional analytics, unique Product and Auction view records.
- Cookies and similar technologies: we use an essential session cookie and browser storage for authentication, checkout and auction flows, legal acceptance prompts, preferences, and dismissed notices. We also store your optional analytics choice and, only after permission, may use a first-party identifier for unique-view measurement. See our Cookie Policy.
- Approximate location: approximate country or regional location inferred from IP address or device settings to support marketplace restrictions, tax treatment, fraud prevention, and service reliability.
- GeoCache information: if you use GeoCache features, we may collect and store cache listings, photos, specimen details, approximate public location information, exact coordinates visible only to authorized roles, favorites, claim-code verification attempts, found-status activity, and related moderation or security records.
App permissions and features you choose
Features depend on your account, device and the options enabled in the Services. We request device access when you choose a feature that needs it. You can manage camera, microphone, location and notification permissions in Android settings. Denying a permission can prevent the corresponding feature from working without granting permission to unrelated features.
- Photos, camera and scanning: we process photos you select or take for listings, messages, support and other uploads. Uploading sends the selected content to MineralCache and its media providers; recipients depend on the feature. Barcode scanning processes camera images on the device through Google Play services, which can also process scanner diagnostics. Temporary app working copies are separate from originals in your gallery.
- Live video and audio: deliberate broadcasting sends camera and microphone content to Amazon IVS for delivery to authorized viewers. Preparing a local preview alone does not publish it. Playback and broadcasting providers also process connection, device and service-quality information. Hiding your local video view does not stop publishing; use Stop Cam to stop camera and microphone capture. End Live is a separate show action.
- Notifications: if enabled, Firebase Cloud Messaging processes an installation identifier, push registration token and app/device metadata to deliver notifications. MineralCache associates the registration and your selected categories with your account. Push payloads use limited event and routing information rather than private message text, payment details or shipping addresses. Notification permission and optional marketing-email preferences are separate choices.
- Sign-in and payments: when you choose Google sign-in, we receive the verified identity needed to sign you in or link your account. Stripe handles card entry, payment verification and associated fraud/device information. Payment providers and banks may require additional authentication.
GeoCache location and maps
Use My Location reads your device location once when you choose it and allow access. You can instead place a point on the map, enter coordinates or choose City Only. GPS, map and coordinate selections are sent through MineralCache to Geoapify to identify Country, State and City when location lookup is available. This happens before saving the cache; discarding the draft does not undo a lookup already sent. We send the selected point, not your account identity or cache description, to that lookup provider. Geoapify receives our server's request and processes it under its privacy policy.
Saving a cache can store its exact source point for authorized owner and administration functions. Finders receive an approximate search area or general locality instead of the exact source point. Approximation is not a guarantee of anonymity, GPS accuracy or safe access. We do not continuously track your location in the background. City Only does not request device location or a precise-point lookup.
Viewing maps requests public tiles or other map assets through our infrastructure and Cloudflare. These requests include ordinary IP/network information and the map area requested; they do not include private cache coordinates or account credentials. Providers can infer the viewed area from tile requests. Public map assets may be cached on your device. Map attribution identifies the applicable data sources and licenses.
How we use information and our reasons for doing so
- Account creation, authentication, and session management: we use account information, session data, and security logs to create accounts, sign you in, keep you signed in, and maintain account security. We do this to perform our contract with you and to protect the marketplace based on our legitimate interests.
- Orders, auctions, shipping, refunds, and vendor operations: we use transaction, shipping, payout, and communication information to process purchases, auction settlements, vendor onboarding, fulfillment, returns, refunds, and support. We do this to perform our contract with you and, where applicable, to comply with legal obligations.
- Fraud prevention, security, and marketplace enforcement: we use technical information, payment status, location signals, and account activity to prevent fraud, enforce our Terms and policies, moderate listings and auctions, investigate abuse, and keep the Services reliable. We do this based on our legitimate interests and, where required, legal obligations.
- Service communications: we use contact details and transaction records to send order confirmations, shipping updates, settlement notices, account notices, legal updates, policy updates, security notices, and support responses. These communications are necessary to perform our contract with you, comply with legal obligations, or support our legitimate interests in operating the Services, and they may be sent even if you have not opted into marketing emails.
- Optional marketing: if you opt in, we may use your email address, name, account role, and communication preference to send MineralCache marketplace updates, featured listings, auctions, vendor updates, and promotional opportunities. Marketing opt-in is not required to use core marketplace features, and you can opt out as described below.
- Optional first-party analytics: if you select Allow Analytics, we may use a random browser identifier, or your account ID when signed in, to count unique Product and Auction views and understand listing interest. We do not use this measurement for advertising, cross-site tracking, or behavioral profiling. You may withdraw permission at any time through Cookie Preferences.
When we share information
Categories of recipients may include:
- Independent vendors and marketplace participants: information needed to complete marketplace transactions, such as shipping name, shipping address, order details, and return-related information.
- Payment and financial service providers: providers such as Stripe that help us process payments, subscriptions, invoices, tax calculations when configured, credit notes, refunds, disputes, payouts, saved payment methods, fraud screening, and related financial operations.
- Operational service providers: hosting, infrastructure, storage, media hosting and processing, communications, security, fraud-prevention, and similar providers acting on our instructions or under contractual restrictions.
- App, mapping and streaming providers: Google/Firebase for chosen sign-in, scanning and push features; Amazon IVS for live video; Geoapify for selected-location lookup; and Cloudflare for map, media and security infrastructure. Processing can include service, device and network diagnostics as well as the feature data described above.
- Diagnostics and communications: Sentry receives filtered website/server error reports when configured, and Resend delivers transactional email. Diagnostic filtering reduces sensitive content; it does not make all network or error metadata anonymous.
- Website fonts: the website loads fonts from Google Fonts, which receives ordinary network and font-request information. The Android app packages its fonts locally.
- Delivery, shipping, and logistics parties: carriers or related parties where shipment, delivery confirmation, or return handling requires it.
- Legal, compliance, and safety recipients: regulators, law enforcement, professional advisers, or other parties where reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or enforce our policies.
- Business transfer parties: counterparties and advisers involved in a merger, acquisition, financing, reorganization, or asset sale.
International users and cross-border processing
MineralCache is based in the United States. If you access or use the Services from outside the United States,
including from the European Union or the United Kingdom, your personal information may be collected, stored,
accessed, and processed in the United States and in other countries where our service providers or marketplace
operations are located.
Data-protection laws in those countries may differ from the laws in your jurisdiction. When we transfer
personal information across borders, we use contractual, technical, and organizational safeguards appropriate
to the nature of the information and the transfer.
Your choices and rights
- Account information: you can update certain account details through your account settings. Some information may also be corrected by contacting us at privacy@mineralcache.com.
- Access, correction, and deletion: use the account-deletion page or My Account in the app where self-service is available. You may also request account deletion, access to or correction of personal information, including when you cannot sign in or self-service is unavailable, by contacting privacy@mineralcache.com. Identity verification and lawful retention exceptions apply.
- Marketing communications: you can opt into optional marketing emails during registration, vendor application, or through your account settings. You can opt out through My Account > Email Preferences, using any unsubscribe mechanism included in a marketing email, or by contacting us. We may still send operational, transactional, legal, policy, security, account, order, auction, Live Show, payout, support, or service communications where needed.
- Cookies and browser storage: use Cookie Preferences in the MineralCache footer to allow or decline optional first-party analytics. You can also control many cookies and browser-storage settings through your browser. Some essential functions, such as login, checkout, auctions, account security, and payment flows, may not work correctly if required storage is blocked.
- US state privacy rights: depending on your state, you may have additional rights to know, access, correct, delete, or opt out of certain processing. Contact privacy@mineralcache.com to exercise those rights where applicable.
- EEA and UK rights: if applicable law grants you rights of access, rectification, erasure, restriction, portability, objection, or withdrawal of consent, you may exercise those rights by contacting privacy@mineralcache.com. You may also lodge a complaint with your local supervisory authority or, in the United Kingdom, the Information Commissioner's Office.
- Global Privacy Control and similar signals: when your browser sends a supported GPC signal, we treat optional first-party analytics as declined in that browser. Where required by law, we also honor supported global opt-out signals for other processing to which they legally apply.
Retention
We retain personal information for as long as reasonably necessary to operate the Services, complete
transactions, maintain security and fraud controls, comply with legal, tax, accounting, and recordkeeping
obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of
account, transaction, communication, or compliance record involved. When information is no longer needed, we
delete it, anonymize it, or retain it only as required by law.
Vendor and Member subscription consent, invoice, tax, credit-note, refund, dispute, chargeback, email-delivery,
and reconciliation records may be retained after cancellation or account closure when reasonably necessary
for tax, accounting, payment-provider, fraud-prevention, dispute-resolution, legal, and recordkeeping obligations.
When account-deletion self-service is available, a verified request starts a 30-day grace period and prevents
the account from creating new marketplace obligations. Existing auctions, orders, Live Shows, Open Boxes,
subscriptions, refunds, disputes, payouts, GeoCache stewardship, and other binding activity must finish safely
before final deletion begins. The request progresses automatically as those items settle and may be cancelled
until final processing starts. Requesting deletion does not create an automatic refund or erase an amount owed.
At completion, we delete personal profile, authentication, preference, saved-data, and non-required provider
information where safe, and remove or replace direct account identifiers in transaction history that must remain.
Retained evidence can still contain personal information needed for the permitted purpose; account de-identification does not make every retained record anonymous. Financial, tax, accounting, fraud-prevention, dispute, payout, safety, and legal records may be
retained only for the applicable purpose and period. A completed user may later register a new account with
the same email address; the new account is not reconnected to anonymized history.
Listing media, including uploaded photos and videos, may be hosted, stored, processed, transformed, displayed,
moderated, and retained by service providers that help us operate marketplace media features.
An optional analytics choice is retained for up to 180 days. If unique-view measurement is enabled with your
permission, its browser identifier is retained for up to 180 days. Related records may be retained as
reasonably necessary to preserve aggregate listing counts, prevent duplicate counting, and maintain service
integrity, then deleted or anonymized when no longer needed.
Device storage and cleanup
The Android app uses private device storage for session and recovery information, settings, temporary media and bounded public-content caches. Sensitive session credentials are protected using Android-backed encryption; this is not a claim that every cached image or preference has separate app encryption. Temporary media has an age limit and is pruned when the relevant storage is accessed, rather than at an exact background deletion time. Public map caches are evictable. Signing out retires local session and notification access but does not erase every preference or provider record. Uninstalling the app does not delete your MineralCache account or server records.
Providers have their own retention obligations and service settings. Request account or personal-data deletion through the paths above; retained transaction, dispute, security and legal evidence is handled as described in this Policy.
Security
We use administrative, technical, and physical safeguards appropriate to the nature of the information. No
method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we are
required to provide notice of a data breach, we will do so in accordance with applicable law.
Children
MineralCache is for users 18+. We do not knowingly collect personal information from children under 18. If you
believe a child has provided personal information, contact us and we will take appropriate steps to address it.
Do-Not-Track and similar controls
Browser Do-Not-Track signals are not uniform, so we do not respond to them as a standalone standard at this
time. A supported GPC signal disables optional first-party analytics in that browser. Where required by law,
we also honor applicable global opt-out signals for other relevant processing.
Changes to this Policy
We may update this Policy from time to time. Material changes will be posted on the Services and, where
required, we will notify you. We will seek a new choice or consent where required by applicable law.
Acknowledging this Policy or continuing to use the Services does not replace consent required for optional processing.
Contact
MineralCache, LLC · P.O. Box 5, Llano, TX 78643, USA ·
privacy@mineralcache.com