Privacy policy
Updated Sep 13, 2026
UnboxingTN collects the bare minimum: enough to recognise you when you sign in, enough to show what you post, and — only if you agree to it — enough to measure how the app is used. The catalogue is readable with no account and with no measurement at all until you have accepted something.
What we collect
If you do not sign in: nothing that identifies you. Your language and your theme are remembered on your device; so is your answer about measurement.
If you sign in with Google: your name, your e-mail address and your profile picture, as Google hands them to us, plus an internal account identifier. We receive neither your password, nor your contacts, nor anything else from your Google account.
What you write: your reviews, your comments, your ratings, and the points they earn you. A review is public, under your name and your picture.
Crash reports: when a page breaks, the error message, the stack trace, the address of the page, the app version and the kind of device. These reports carry no personal data at all: no IP address, no cookie, no account identifier, and no recording of what you type or of what is on your screen.
Analytics, if you accept them: page views and actions in the app, tied to a random identifier that is not your account. None of it is collected before you agree, and refusing takes no feature away.
We do not collect your location, do not read your contacts, ask for no device permission, and neither buy nor sell any data.
Why, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Google identity | recognise you, sign what you post | performing the service you asked for |
| Reviews, comments, points | make the community work | performing the service |
| Language, theme, consent answer | give you the app as you set it | legitimate interest, strictly necessary data |
| Crash reports, carrying no personal data | fix what breaks | legitimate interest |
| Analytics | understand what is useful and what is not | your consent, which you can withdraw |
Where your data is kept
| Processing | Provider | Place |
|---|---|---|
| Database and authentication | Supabase | Paris, France (eu-west-3) |
| Website and pictures | our own servers behind Cloudflare | Germany, and Cloudflare's network |
| Catalogue pictures | MEGA S4 | European Union |
| Crash reports | Sentry | European Union (de.sentry.io) |
| Analytics, if accepted | PostHog | European Union |
| Signing in | under Google's own policy |
Catalogue pictures are pictures of devices: they hold nothing about you. Signing in goes through Google, whose privacy policy governs what happens on their side.
For how long
- Your account and what you post: as long as the account exists. Delete it and all of it goes with it.
- Language, theme, consent: one year on your device, or until you change them.
- Crash reports: 90 days, then deleted.
- Analytics: 12 months.
Who can see it
The owner of UnboxingTN, and the providers in the table above, each only for the one task it is given. Nothing is sold, nothing is rented, nothing goes to an advertiser. A Tunisian or European court may compel disclosure; that would be the only exception, and it would be limited to what is compelled.
Your rights
You can see your data, correct it, export it and delete it. The Your rights page explains how, and deleting your account takes two clicks on the Account screen.
Children
UnboxingTN is not aimed at anyone under 13 and does not ask them for an account. A child's account that is reported to us is deleted.
Changes
The date at the top of this page is when this policy last changed. A change to what you agreed to comes back to you as a question, not slipped into a text.
Writing to us
[[CONTACT_EMAIL]]