Privacy policy

Last updated: September 18, 2026 · DCG Labs Inc.

1. Who we are

Diecast Garage is made by DCG Labs Inc., an Ontario corporation (“we”, “us”). This policy covers the Diecast Garage apps for iPhone and Android, the web app at app.diecastgarage.ca, the website at diecastgarage.ca, and public share pages. Our Privacy Officer is responsible for how we handle personal information and can be reached at info@diecastgarage.ca.

2. What we collect

What you give us

• Account: email address, password (stored only as a secure hash), display name, and, if you choose them, a handle, region and profile picture.
• Your collection: cars, garages, photos, wish list, what you paid, where you bought, notes, and spreadsheets you import.
• Marketplace and community: listings, offers, messages, deals, ratings, reports, blocks, follows, and your public profile if you turn it on.
• Price contributions: sale prices you log, which feed the anonymized community valuations unless you opt out in settings.
• Purchases: what you bought and when. Payment details stay with the store or payment processor.
• Contact: what you send us, and the email address you leave for the beta list.

What we receive automatically

• Technical data: IP address, device platform, app version, and a push token if you allow notifications.
• Service logs: which features were called and when, errors, and AI usage against your Fuel balance. These keep the service running, secure and within budget.
• Usage analytics, session recordings and attribution, only if you agree to them. See section 5.

What we receive from others

• Google or Apple, if you sign in with them: your email address and name.
• App stores and payment processors: confirmation of a purchase or refund.
• Other collectors: ratings, messages and reports that involve you.

3. What stays on your phone

Some permissions work entirely on the device. Location, if you allow it, sorts shows by distance on your phone and is never sent to us. Calendar access adds a show you chose to your calendar; we don’t read your calendar. Camera and photo library access is used only for the pictures you take or pick.

4. How we use it

• To run the app: sign-in, your garage, identification, values, the marketplace, notifications and purchases.
• To keep it safe: fraud and abuse prevention, moderation, security monitoring and enforcing our terms.
• To improve it: fixing bugs, understanding which features help collectors, and testing better versions of screens (section 5).
• To talk to you: service messages you need, and marketing only if you agreed to it (section 11).
• To measure our marketing, if you agreed: which campaigns, partners and links bring collectors to the app (section 5).
• To meet legal obligations, such as tax records for purchases.

We use personal information only for the purposes described here, or a new purpose you consent to.

5. Analytics, product research and marketing measurement

We want to build the app from evidence, not guesses. These are the kinds of measurement we use or may use, and what each one needs from you.

Essential measurement (always on)

Error reports, service logs, security monitoring, and the counts we need to run the service, such as AI usage and spending limits. These are not used for advertising and aren’t linked to marketing profiles.

Product analytics (only with your consent)

Records of how the app is used: screens opened, features used, the steps of a scan or a listing, where people stop, and whether a purchase completes. Events carry a random app identifier and, while you’re signed in, your account identifier, so we can understand journeys across sessions and devices. They never include the contents of your photos, messages or notes, what you paid for a car, your password or payment details.

Session recordings and heatmaps (only with your consent)

Reconstructions of how screens were used, such as taps, scrolls and screen changes, and heatmaps that combine many sessions to show which parts of a screen get attention. Anything you type, message text, notes, prices, and sign-in and payment screens are masked on your device before anything is sent. We use them to find confusing or broken screens.

Experiments

We sometimes show different versions of a screen or feature to different collectors to learn which works better. Which version you see is set so the app can work; measuring how that version performed uses product analytics, so it counts you only if you consented to analytics.

Marketing measurement and attribution (only with your consent)

Knowing which ad, campaign, partner, referral or affiliate link brought someone to install, sign up or buy. With your consent, this can mean sharing a device advertising identifier or a hashed (scrambled) email address with advertising platforms, to measure results and to show our ads to people likely to enjoy the app. On iPhone this also needs Apple’s tracking permission, which we ask for where it applies. Without your consent, we rely only on privacy-preserving store measurement from Apple and Google, which doesn’t identify you.

AI-assisted analysis

We may use AI tools, including the AI providers named in section 8, to summarize and find patterns in feedback, support messages and analytics. We don’t make decisions with legal or similarly significant effects about you by automated means alone.

Your choices

We ask before turning on product analytics, session recordings and heatmaps, or marketing measurement, and each can be accepted or declined on its own. Declining never limits what the app does for you. You can change your mind at any time in the app, or by writing to info@diecastgarage.ca. On the website and web app, cookies and similar storage are used only for essential purposes, such as keeping you signed in, unless you accept more.

What runs today: usage analytics, session recordings and heatmaps run through PostHog on the web app and this website, and on this website Google Analytics counts visits and Microsoft Clarity adds heatmaps and recordings, each only for people who turned them on. On phones they arrive with a later app version. No advertising measurement tool runs yet. Each new tool is added to the provider list in section 8, with its consent choice in the app, before it goes live.

6. What other people can see

• Your garage is private by default, and your email address is never shown to other collectors.
• Listings: a car you list for sale or trade appears in the marketplace with its photos, price, and your display name or handle.
• Public profile, off by default: if you turn it on, your handle, profile picture, region, followers and activity become visible, along with your garage and wish list shelves if you allow them. What you paid, where you bought, your notes and values are never shown.
• Messages and deals are visible to the collectors involved, and to our staff when needed to handle a report or keep the service safe.
• Ratings you leave appear on the other collector’s profile.
• Catalog photos: a photo of a casting that has no catalog image yet may become that casting’s shared catalog image.
• Share links you create can be opened by anyone who has them.

7. When we share personal information

We don’t sell your personal information. We share it only:

• with the service providers in section 8, for the work described;
• with advertising platforms, for the marketing measurement in section 5, and only if you consented;
• with other collectors, as described in section 6;
• when the law requires it, or to protect the safety, rights or property of collectors, the public or us;
• with a buyer or successor if Diecast Garage or DCG Labs Inc. is sold, merged or reorganized, who must honour this policy; and
• with anyone else, only with your consent.

We may share aggregated or de-identified insights, such as how many collectors own a casting or trends in what collectors scan, with partners, toy makers, retailers and the public. These can’t reasonably be used to identify you.

8. Service providers

These providers process personal information for us. Where their terms allow it, we use settings that stop them from training AI models on your data.

9. Where your information is stored

Our servers and most of our providers are in the United States, so your information is stored and processed outside Canada, and courts and authorities there may be able to access it under their laws. We rely on our providers’ contractual commitments to protect it.

10. How long we keep it, and deletion

Account and collection data is kept while your account is active. You can permanently delete your account in the app (Garage, then Settings, then Delete account). Deletion takes effect immediately and removes your collection, photos, listings, offers, messages, deals and Fuel balance. You can also ask us at info@diecastgarage.ca, and we’ll finish within 30 days. Copies in our backups are removed as those backups expire on their normal schedule.

A few things survive deletion by design: anonymized valuation data with no link to you; catalog entries you contributed, with your name removed; a photo of yours that became a casting’s shared catalog image; evidence attached to an unresolved report, until a moderator resolves it; records we must keep by law, such as purchase and tax records; and a minimal record of the deletion itself (your email address and when), kept for accountability.

Optional measurement has limits of its own: product analytics events are deleted or fully aggregated within 25 months, session recordings within 90 days, and marketing attribution records within 24 months.

11. Emails and notifications

We send the service messages you need, such as password resets, marketplace notifications you haven’t turned off, and important changes to these policies. Marketing messages, such as news, offers and partner promotions, go only to people who agreed to receive them, and every one has a working unsubscribe link. Push notifications can be turned off in your phone’s settings.

12. Your rights

• Access: ask what personal information we hold about you and how it has been used and shared.
• Correction: fix inaccurate information, most of it directly in the app.
• Portability: export your collection in the app, or ask us for your information in a structured, commonly used format.
• Withdraw consent: switch off optional analytics, recordings, marketing measurement or marketing messages at any time.
• Deletion: delete your account in the app, or ask us to.

Write to info@diecastgarage.ca. We’ll answer within 30 days and may ask you to confirm your identity first. If you’re not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

13. Security

Data is encrypted in transit. Passwords are stored only as hashes and are checked against known breach lists when set. Staff access to collector data requires sign-in, supports two-factor authentication and is logged. No system is perfectly secure; if a breach creates a real risk of significant harm, we’ll notify you and the regulators as the law requires.

14. Children

Diecast Garage is not directed at children under 13, and we don’t knowingly collect their personal information. If you believe a child under 13 has an account, write to info@diecastgarage.ca and we’ll delete it.

15. Changes

We’ll post changes here with a new date. For material changes, including any new kind of tracking, we’ll give notice in the app first, and where the law requires it we’ll ask for your consent again.

16. Contact

Privacy Officer, DCG Labs Inc.: info@diecastgarage.ca. Our terms of service are at diecastgarage.ca/terms.