Privacy Policy | Florin House

1. Who we are

Florin House ("we", "us", "our") operates the website www.florinhouse.com — a platform for coin collectors to browse, track, trade, and learn about coins. We are the data controller for the personal data described in this policy.

Florin HouseFlorin House is a trading name of FLORIN HOUSE LTDCompany number 17480418Registered office: 103 Alpine Street, Reading, England, RG1 2PZEmail: hi@florinhouse.com

This policy explains what we collect, why, who we share it with, how long we keep it, and what you can do about it.

2. Information we collect

Account information: email address, display name, username, profile picture and anything you add to your profile, when you create an account or sign in with Google; and, when you create an account from the sign-up form, which version of our Terms of Service you agreed to and when.
Collection data: coins you add to your collection and want list, and the photographs you upload to identify or record a coin.
Insurance catalogue: if you use it, the photographs you take of your coins, front and back (stored without the location data a phone adds to a photo), the purchase dates and prices, notes, declared values and certificate numbers you add, the policy holder, insurer, policy number and notes you put on the PDF's cover, when you accepted the insurance catalogue terms, and whether you have stopped the use of your photos for training.
Florin Plus membership: if you join, the plan you chose and its price; whether your membership is active, cancelled or has a payment due, and when a renewal payment first failed; the dates of the current period and when you first joined; the reference numbers Stripe gives your customer record and your subscription; and when you accepted the Florin Plus terms, and which version. Card details are entered directly with Stripe and never reach us.
Florin Plus waitlist: if you ask to be told when Florin Plus opens, that you asked, when, and which part of the site you asked from (for example the insurance catalogue), and, once we have emailed you that it is open, when we did.
Deep search and Numista imports: in each calendar month, how many coins you have added to Florin House from a deep search of Numista's catalogue, and how many coins your collection imports have looked up in Numista and brought in, so that the monthly allowances can be applied; and, on the free plan, how many new deep searches you have made that day, so that the daily limit can be applied.
Coin requests: if you ask us to add a coin we do not have ("Send it to Florin House"), its name and anything else you give us about it (year, country, denomination, notes, a link to where you saw it, up to two photos), whether you want it added to your collection, and which part of the site you sent it from. Requests are reviewed by us. Like coins sent through the Submit a coin page, they can at present also be read by any signed-in member through the public interface our website uses to fetch its data, and once one is approved, by anyone, so don't put anything private in the notes.
Marketplace data: listings, orders, delivery names and addresses, phone numbers given for delivery, return and dispute records, evidence you upload to a dispute, and ratings. Payment card details are entered directly with Stripe and never reach us.
Seller identity and tax details: for sellers who pass the reporting threshold, legal name, address, date of birth or company number, and tax identifier.
Messages: direct messages and community chat, including photos sent in chat, and any invitations to group chats you send or receive: who invited whom, to which group, when, and whether the invitation was accepted or declined.
Community activity: threads and replies you write and the pictures you add to them (stored without the location data a phone adds to a photo), the GIF you add to a thread or reply (which one, and its name; the GIF itself stays on KLIPY), your votes, the collectors you follow, the communities you create or moderate, and the name, description, picture, banner picture and house rules you give them, reports you make, people you block, and the record of moderation decisions about your posts and messages (what our automatic checks found and what a moderator did). We also keep a short record of when you posted, edited or uploaded a picture and when a post, or a report you made, was sent to the automated check, which we use to apply the daily limits, and a note of any of your pictures we kept because a moderator was looking at the post (section 6).
Games and activity: game scores, achievements and which features you use.
Technical data: IP address, browser and device type, and the pages you visit.

3. How we use your information and on what basis

UK GDPR requires us to have a lawful basis for each thing we do with your data. These are ours:

Purpose	Lawful basis
Running your account, collection, want list, insurance catalogue and games	Performance of our contract with you (the Terms of Service)
Training Florin House's own coin identifier with the photos in your insurance catalogue, and the catalogue details of the coin each one shows	Legitimate interest in building and improving our own coin identifier. You can object at any time with "Stop using my photos for training" on your insurance catalogue page; your photos are then left out of every future training run, though a model already trained with them is not retrained. The photos are processed on our own systems and are not sent to any third party for this. Purchase prices and dates, notes, values and cover details are not used.
Marketplace orders: taking payment, buying postage, tracking, refunds, returns and disputes	Performance of a contract
Florin Plus: taking the membership payments, recording your membership and the terms you accepted, deciding how many coins your insurance catalogue holds and how many deep searches and Numista imports you have each month, and refunding or ending a membership when its payment is reported as fraud or disputed	Performance of our contract with you (the Florin Plus terms, section 14 of the Terms of Service, and for the free plan's allowances the Terms of Service). Keeping payment records after a membership ends: legal obligation (tax and accounting law)
The Florin Plus waitlist: telling you when Florin Plus opens	Taking the steps you asked for before a contract with us. You can take yourself off the list at any time with "Take me off the list"
Coin requests: reviewing a coin you ask us to add, adding it to the catalogue and, if you asked, to your collection, and telling you the outcome	Performance of our contract with you (the Terms of Service)
Publishing your threads, replies, pictures and votes, your follows, and the communities you create or moderate	Performance of our contract with you (the Terms of Service)
Checking community threads and replies before and after they are published, including the automated check (section 9); handling reports, appeals and complaints; taking down illegal content	Legal obligation, as far as the Online Safety Act 2023 requires it. Beyond that, our legitimate interest in enforcing our Community rules: keeping the community safe and useful, and keeping buying and selling on the marketplace, where buyers are protected
Keeping a record of moderation decisions and reports	Legitimate interest in being able to explain, review and correct decisions, and to spot repeated abuse
Keeping, when you delete your account, a copy of what a report still open about it concerns (section 7)	Legitimate interest in dealing with the report, and in establishing, exercising or defending legal claims, which the right to erasure does not override while the copy is kept; legal obligation where the Online Safety Act 2023 requires us to keep records of reports and what we did about them, or to keep data for a report to the National Crime Agency
Reporting child sexual abuse content to the National Crime Agency	Legal obligation (Online Safety Act 2023, section 66)
Emails about your orders, disputes, messages and account	Performance of a contract. These are sent whether or not you have opted into marketing.
The weekly digest, coin stories, milestone and re-engagement emails	Consent, given by the box at sign-up, which is ticked unless you untick it. Withdraw it at any time (section 7).
Collecting and reporting seller tax details; keeping transaction records	Legal obligation (UK digital platform reporting rules; tax and accounting law)
Fraud prevention, bans, and blocking banned users from returning	Legitimate interest in keeping the platform safe for buyers and sellers
Disclosures to law enforcement	Legitimate interest and the crime prevention provisions of the Data Protection Act 2018
Security logging and keeping the site running, including counting how often each account uses features that call our payment provider, to stop abuse	Legitimate interest
Analytics, session recordings and advertising measurement	Consent, given through the cookie banner (section 8)

Moderating posts sometimes means handling sensitive information, for example a post that attacks someone's religion or health, or a report that accuses someone of a crime. We use it only as far as we need to moderate, take down illegal content and report crime. The law allows this for preventing or detecting unlawful acts, for regulatory requirements about unlawful acts and dishonesty, and for safeguarding children and people at risk (Data Protection Act 2018, Schedule 1, paragraphs 10, 12 and 18).

4. Fraud prevention and law-enforcement disclosures

Where we reasonably believe a user has committed fraud on the platform (for example, selling counterfeit coins), we may disclose relevant personal data to the police, Report Fraud (formerly Action Fraud) and Trading Standards under the crime prevention and detection provisions of the Data Protection Act 2018. Disclosures may include account details, messages, order and transaction records, and activity logs. We keep a record of each disclosure.
When an account is permanently banned for fraud, we retain cryptographic hashes (not the raw values) of identifiers associated with the account — email address, phone number and IP address — for the purpose of preventing the banned user from re-registering.
Ban records and associated evidence are retained for as long as the ban stands and for any related legal proceedings.

5. Who receives your data

We do not sell personal data. It is shared with the organisations below, each for the stated purpose only, except KLIPY, which your browser contacts directly and which uses what it receives under its own privacy policy. Several of them process data outside the UK; where we send it, the transfer is covered by UK adequacy regulations or the International Data Transfer Addendum to their standard contractual clauses. Anthropic handles community content in the United States under its Data Processing Addendum, which uses the UK's International Data Transfer Addendum to the EU standard contractual clauses. When you search for a GIF or choose one, or a GIF is shown to you, your browser connects to KLIPY directly; we do not send KLIPY anything ourselves. KLIPY's privacy policy does not say which safeguard covers the UK data it receives, and we have not been able to confirm one. KLIPY has a UK representative, Rickert Services Ltd UK. If you would rather not share this with KLIPY, don't use the GIF search, and turn on your device's reduce-motion setting: GIFs in threads and replies otherwise load when they appear on your screen, and with it they load only when you tap them (without that setting, the moderation queue loads them at once).

Recipient	What they receive	Why
Supabase	Everything stored on the platform: account, profile, collection, listings, orders, messages.	Database, file storage and sign-in (processor).
Vercel	Requests to the site, including IP address; anonymous page-view and performance measurements.	Hosting and site analytics (processor).
Stripe	Card details (entered directly with Stripe, never seen by us), the amount, and for sellers the identity and bank details Stripe collects during onboarding. For Florin Plus: your email address and Florin House account ID, the plan you chose and which version of its terms you accepted; your card details, and any billing address Stripe asks for, are entered on Stripe's own pages.	Taking payments, holding them in escrow and paying sellers; taking Florin Plus payments, and the page where members update their card and see their invoices.
Shippo and the carrier it books (for example Royal Mail)	Both parties' names, addresses, phone numbers and email addresses, and the parcel's tracking events.	Buying postage labels and tracking parcels.
Resend	Your email address and the content of the emails we send you. Reports made on the platform are also emailed to our own inbox through Resend, with the reason, any note written with the report, and shortened ID numbers of what and who was reported.	Delivering email.
Proton (Proton AG, Switzerland)	Everything you email to us, with anything you attach, and our replies. That includes reports, appeals, complaints, intimate image reports, child safety reports and data protection requests, which can contain sensitive information. The report alerts described in the row above arrive in the same service.	Hosting our email inboxes (processor). Switzerland is covered by UK adequacy regulations.
Geoapify	The address text you type into an address field.	Address autocomplete and the map preview on address forms.
OpenAI	Coin photographs you upload for identification.	Counting and identifying coins in a photo.
Anthropic	For community moderation: the title, text and pictures of each thread and reply, and the name of any GIF added to it (not the GIF itself), when it is posted or edited, and when it is reported (but not when the report is of child sexual abuse or grooming, an intimate image or other illegal content, or while such a report about it is open); how many days old the author's account is; which of our automatic checks it triggered; the house rules of the community it is in; and, for a report, the reason given and any note written with it. Pictures are sent as web links, which Anthropic's systems open; each link contains the uploader's account ID. Each request also carries a coded reference to the author's account (not the account ID itself), which Anthropic may use to spot misuse of its service. Names, usernames and email addresses are not sent. For the blog: coin catalogue data only, with no personal data.	Automated checking of community threads and replies (section 9), and drafting coin stories for the blog. Anthropic acts as our processor and handles this data in the United States (see the paragraph above this table).
KLIPY (Kikliko, Inc., United States)	If you use the GIF search: the words you type into it, your IP address and your browser details, and, when you post a GIF, which one and the words you found it with. When a GIF in a thread or reply appears on your screen, or you open the moderation queue as a moderator: your IP address, your browser details and which GIF it is. Your name, username, email address and account ID are not sent.	Searching for and showing GIFs. KLIPY decides for itself how it uses this, under its own privacy policy, and handles it in the United States (see the paragraph above this table).
Google (Analytics and Ads)	Pages visited, device and approximate location, and whether a visit led to a sign-up. Only with your consent (see section 8).	Measuring site usage and advertising conversions.
Microsoft Clarity	Anonymised session recordings and heatmaps, with form inputs masked. Only with your consent.	Understanding how the site is used.
CookieHub	Your cookie choices.	Recording and enforcing your consent.
Google (sign-in)	Your name, email address and profile picture, if you choose to sign in with Google.	Optional sign-in method.
HMRC	Sellers who pass the digital-platform reporting threshold: name, address, date of birth or company number, tax identifier, the Stripe account identifier, and the year's sales and fees.	A legal obligation on UK digital platforms.
The police, Report Fraud (formerly Action Fraud) and Trading Standards	Account, order, transaction and message records of a user we reasonably believe has committed fraud; and content we believe is a crime, such as terrorist content or threats, with the details of the account that posted it.	Crime prevention and detection (section 4).
The National Crime Agency	Child sexual abuse content, including grooming, found on the platform, with the details the law requires about the account that posted or sent it and about any account that received it: for example the username, email address and phone number we hold, the profile link, and the IP addresses we have for the account.	A legal duty on UK platforms to report it (Online Safety Act 2023, section 66).
Moderators	Site moderators we appoint see, across the platform, threads and replies that are held or taken down, reports about them (the reason and any note) and the record of moderation decisions. Where that record notes that we took down a private message, it shows them when and why, never who sent it, nor its words or pictures. Community moderators, who are volunteers, see the same for their own community only, apart from reports of child sexual abuse or grooming, an intimate image or other illegal content, and reports about anything our automated check found one of the serious harms in, which only site staff see. Only the owner can see who made a report.	Moderating community content (section 9).

The other party to an order also receives what the order needs: a seller sees the buyer's delivery name and address; a buyer sees the seller's display name and username. Anything you post in a community thread or reply can be seen by everyone: section 9 says what is public.

6. How long we keep it

Data	Kept for
Account and profile	Until you delete your account. The profile is then anonymised: your name, username, email address, picture, bio, badges and links are removed (if a report involving you is still open, a copy of your name, username and email address is kept for us alone, as the row about open reports below says). These stay on it: the dates your account was created and was last active; your points, contributions and rank (which anyone can still read, under "Deleted collector"); the Stripe account ID needed for past orders; when you agreed to marketing emails and to the seller anti-fraud policy; which version of the Terms of Service you agreed to when you signed up, and when, where the profile holds that record; how you first found the site (the first page you landed on, the site that sent you there, and when); any ban or selling restriction; and your display settings, such as currency.
Collection, want list, game scores	Until you remove them or delete your account.
Insurance catalogue photos and details	Until you delete them or delete your account. Photos you delete, and all your photos once you stop their use for training, are left out of every future training run; a model already trained with them is not retrained.
Chat messages and photos sent in chat	Until you delete them or delete your account. If a report about them is still open when you delete your account, a copy is kept for us alone, as the row about open reports below says.
Invitations to group chats (who invited whom, to which group, and whether it was accepted or declined)	90 days from when the invitation was sent, whatever happened to it, unless the law requires us to keep it longer (see "Content reported to the National Crime Agency" below).
Community threads and replies	Until you delete them. A thread nobody has replied to, or a reply nobody has answered, is then deleted completely, apart from what our moderation records hold about it (see below; for a thread with open reports, that includes its title, and while a report about it, or a referral from our automated check, is open, what it said). A thread with replies stays, under your name, as "This thread was removed", with its title, text and pictures cleared. A reply that others have answered stays, under your name, as "Removed by author" and its words are no longer shown, but they stay in our database, where nobody can see them, for up to two years after you delete it. If you delete your account, your threads and replies stay up under "Deleted collector", and section 7 says what happens to their pictures.
Threads and replies that are held or taken down	Kept, hidden, so the decision can be reviewed, for up to two years after the decision, or longer while an appeal, complaint or legal case about it is open. A reply that is taken down stays in its thread as "Taken down", without its words or pictures.
Pictures in threads and replies	Until you delete the post. Deleting a post deletes its pictures, unless a moderator is looking at it, another of your posts uses them, or the law requires us to keep them; we then keep them in private storage, where only we can see them. When a post is taken down, its pictures are moved from their public web address into private storage within about two hours, unless another post that is still showing uses them, and kept for as long as the post is (see the rows below); they come back if it is put back. A picture you upload but never post is deleted about a day after you choose it; one we cannot tell was never posted, such as one uploaded before we started keeping a record of uploads on 27 September 2026, is moved to private storage instead, and deleted when you ask. When you delete your account, the picture files are deleted as section 7 explains. We also delete files by hand when we take a picture down as illegal or as harmful to children, and when you ask us to.
A record of when you posted, edited or uploaded a picture, when a post was sent to the automated check, and when a report you made was	30 days. We use it only to apply the daily limits and the limit on automated checks, and to tell a picture you never posted from one we must keep. Nobody else can see it.
A note of which of your pictures we kept because a moderator was looking at the post	As long as the record of moderation decisions it belongs to (up to two years).
GIFs in threads and replies	We keep which GIF you chose (a link to it on KLIPY, and its name) for as long as the thread or reply, or, if you edit or delete the thread or reply while a report about it or a referral from our automated check is open, with the record of moderation decisions (up to two years). We never store a copy of the GIF: it stays on KLIPY, and if KLIPY removes it, KLIPY shows a notice in its place. What KLIPY receives when you search for a GIF or one is shown to you, KLIPY keeps under its own privacy policy.
Votes and follows	Until you remove them. They are kept if you delete your account: your votes still count, and the record of who you followed and who followed you stays.
People you block	Until you unblock them. They are kept if you delete your account.
Moderator roles	Until the role ends. A role you held is kept if you delete your account.
Reports you make	Up to two years after the report is closed (see moderation records below), and deleted sooner if you delete your account, except a report that is still open and is urgent or has evidence kept for it: that one is kept while it is open, as the row below says.
What an open report concerns, when an account it involves is deleted (the messages and their photos the deletion would remove, who sent them and when, a reported thread, reply, listing or profile as it was, the account's name, username and email address, and a report the account made)	Kept for us alone while a report about it is open, up to 90 days: we delete it within about an hour of the report being closed, or of the 90 days ending, whichever comes first. Longer only while the law requires us to keep it, such as for a report to the National Crime Agency (see below).
Moderation records: decisions, warnings, what the automated check found, and reports about you	Up to two years from the decision, or longer while an appeal, complaint or legal case about it is open. The automated check's record holds the category it chose, how sure it was and a one-line reason, not a copy of your post. If you edit or delete a thread or reply while a report about it or a referral from our automated check is open, these records keep what it said before: its title, text, the web addresses of its pictures and which GIF it had. The record of a private message we took down holds who sent it, when and why, not the message.
Content reported to the National Crime Agency	The content, what we sent with the report, the information we used to decide it had to be reported, and, from the two weeks before the content was posted or sent, the files, messages and connections of the account that sent it and of any account that received it: 1 year, even if the account is deleted. The report's reference number: 5 years. Both periods are set by law.
A record that an account's data must be preserved (which account, why, and when the hold was placed and released)	While the hold stands, then for up to 5 years from when it is released. While it stands, that account's pictures in threads and replies are not deleted automatically, invitations to group chats it sent or received are kept, and if the account is deleted, a copy of the messages it sent and of both sides of its direct conversations, with their photos, is kept for us alone until the hold is released.
Community content sent to Anthropic	Kept by Anthropic under its own published policy for its API: deleted within 30 days, or kept for up to 2 years if its safety systems flag the request.
Florin Plus membership record	While you have an account. If you delete your account, your membership is cancelled at once and this record is kept, marked as ended, as a record of your payments, for up to 6 years from the end of the financial year of your last payment, as tax and accounting law requires. It holds no card details. Stripe, our payment processor, keeps the record of your payments for the same period, together with the customer record we created for you there.
Florin Plus waitlist	Until we have emailed you that Florin Plus is open, when we delete your place on the list; we keep only the date of that email, for 30 days, then delete it. Or sooner, when you take yourself off the list or delete your account.
Deep search and Numista import counts	One count per calendar month, kept while you have an account and deleted when you delete it.
Coin requests	Until you delete your account. A coin we add stays in the catalogue, without your name.
Counts used to limit how often a feature can be used	An hour or a day at a time, and deleted within two days of that period ending.
A record that you ran a deep search, so that its further pages are shown only to you	24 hours, then deleted the next time anyone runs a deep search. It holds your account only as a one-way hash.
Orders, payments, refunds and dispute records	6 years from the end of the financial year of the transaction, as tax and accounting law requires. They stay after account deletion, with your profile replaced by "Deleted collector".
Seller tax details reported to HMRC	5 years after the end of the reporting year they relate to.
Ban records and hashed identifiers	Indefinitely, for as long as the ban stands.
Marketing consent	Until you withdraw it. We keep a record of when it was given and withdrawn.

Your data is stored on Supabase servers with row-level security, all connections use HTTPS, and payment data is held by Stripe under PCI DSS. We never store card details.

7. Your rights

Access and export. Email hi@florinhouse.com and we will send you a copy of the personal data we hold about you, including your collection, within one month.
Correction. Change your profile and addresses from your account settings; email us for anything you cannot edit yourself.
Deletion. Delete your account from your account settings. Your profile is anonymised, and your collection, want list, messages, addresses and the reports you have made are removed. Any invitations to group chats that you sent or received are not removed then: like everyone's, they are deleted 90 days after they were sent (section 6). Your community threads and replies are not removed: they stay up, shown as written by "Deleted collector", so that conversations still make sense, but the pictures are taken off them, and a reply that was only pictures then shows as "Removed by author". A post that is held or taken down keeps its pictures with the record of moderation decisions, and a post a moderator is still looking at, or every post while a report about you is open, keeps its pictures while we deal with it. The picture files are then deleted, apart from any we have to keep, such as those of the posts just described, which end up in private storage, where only we can see them. Your votes still count. The record of who you followed and who followed you is kept, and so are the people you blocked, any moderator role you held, and the details section 6 lists as staying on the anonymised profile, such as the dates your account was created and was last active. A community you own is handed to its longest-standing member. If you are its only member, it is deleted, unless it has threads or a moderation history, in which case it stays up with no owner, keeping the name, description, picture, banner picture and house rules you gave it. When a community is deleted this way, the files of its picture and banner picture are not yet deleted with it and stay at their web addresses: email hi@florinhouse.com to have them deleted. If you want your threads and replies removed, delete them before you delete your account, or email hi@florinhouse.com and tell us which: you can still ask after your account is gone, and we will deal with the request. Deleting your account is never refused because of a report. But if a report involving you is still open, we first keep a copy of what it concerns: the messages that deleting your account would otherwise remove, with their photos (in a direct conversation, both people's), who sent them and when; a reported thread, reply, listing or profile as it was; your name, username and email address; and a report you made, if it is urgent or we keep anything for it. Only we can see that copy, and we delete it when the report is closed, or after 90 days, whichever comes first, unless the law requires us to keep it longer. The record of moderation decisions about your posts and messages is kept for the period in section 6. Deletion waits until any order you are part of has finished, and order, payment, dispute and tax records are retained for the periods in section 6 because the law requires it. If you are a Florin Plus member, deleting your account cancels your membership at once; the record of it is kept as a payment record (section 6). Deleting your account also takes you off the Florin Plus waitlist and deletes your coin requests and your monthly deep search and Numista import counts.
Marketing email. The box at sign-up for the weekly digest and collector news is ticked; untick it if you do not want them. We keep the date the box was left ticked. Withdraw consent at any time from your account settings or with the one-click unsubscribe link in every marketing email. Emails about your orders, disputes and messages are not marketing and continue while you have an account.
Objection and restriction. You may object to processing based on legitimate interests, or ask us to restrict it, by emailing us. We will stop unless we have compelling grounds, for example an open fraud investigation. To stop the use of your insurance catalogue photos for training you can also use "Stop using my photos for training" on your insurance catalogue page, which takes effect without our involvement.
Decisions made by automated means. Our automated check can take down a community thread or reply without a person being involved (section 9). You have the right to ask for a person to review that decision, to tell us your side, and to challenge it: email hi@florinhouse.com with the subject "Appeal". A person looks at it again and we tell you the outcome within 7 days.
Complaints to us. You have the right to complain to us about how we use your personal data. Email hi@florinhouse.com with the subject "Data protection complaint". We will acknowledge it within 30 days (we aim for 2 working days), look into it, and tell you what we have found and what we are doing about it without undue delay.
Complaints to the regulator. You can also complain to the Information Commissioner's Office, whether or not you have complained to us first: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; ico.org.uk/make-a-complaint.

8. Cookies and analytics

Essential cookies keep you signed in and remember your cookie choices; they need no consent. Analytics and advertising tags (Google Analytics, Google Ads conversion measurement and Microsoft Clarity) load only after you accept them in the cookie banner, which is provided by CookieHub. Until you accept, Google's consent mode keeps analytics and advertising storage switched off.

You can change your choice at any time by clearing this site's cookies in your browser, which brings the banner back on your next visit.

9. Communities: what is public and how posts are checked

What anyone can see

Threads and replies in the main feed and in public communities, with their pictures, GIFs and scores (up votes minus down votes), whether or not the reader is signed in. A GIF loads from KLIPY when it appears on the reader's screen (or, with the device's reduce-motion setting on, when they tap it). Beside each one: the author's display name, username, profile picture and account ID (a random string that does not contain your name). We ask search engines not to list individual threads, but the picture files sit at public web addresses on our storage provider.
Threads and replies that were taken down or deleted. When a reply is taken down, or its author deletes a reply that others have answered, it stays in the thread as "Taken down" or "Removed by author" under the author's name, without its words or pictures. So anyone reading the thread can see that a named member had a reply taken down. When an author deletes a thread that has replies, it stays as "This thread was removed" under the author's name, without its title, text or pictures. A thread that is taken down is not shown to anyone except its author and the moderators.
Public communities: each one's name, description, picture, banner picture, member count, the date it was founded, its house rules, where it stands on the moderation ladder (with a notice when that is anything but active), its threads, and who moderates it (their display names, usernames and profile pictures).
Pictures: pictures you add to threads and replies, and a community's own picture and banner picture when its owner sets them, are saved as a fresh copy, without the location and other hidden details a phone adds. The photo a community's owner uploads for them is deleted once the copy is made, or within a few hours if it is never used. A community's picture set before we began doing this was stored as it was uploaded, so if you own a community, setting its picture again makes sure it carries none of those details.
Follows: how many followers a collector has. Who follows whom is known only to the two people concerned (we tell you when someone follows you) and is not shown to anyone else.
Profiles: your display name, username, profile picture, bio, badges and points, and when you joined. If your collection is public, also the links you add to your profile and when you were last active. If it is private, those two are not shown to anyone but you, on the site or through the interface our website uses to fetch its data; the one exception is that when you send someone a message, the email telling them about it may say that you were online, and at what time, if you were on the site in the quarter of an hour before the email was sent. Your daily-game results (your scores, streaks and when you last played) are separate from your collection and not covered by its setting: at present anyone can read them through the same interface.
Collections and want lists: if your collection is public, the coins in it (with their quantity, condition and grade, and when you added them), the coins on your want list, and how many people have liked your collection. While it is public, collectors who own a coin you add to your want list may be told that you want it (never the most you would pay), and people who have a coin on their want list may be told when you add one to your collection. If you make your collection private, nobody but you can see any of these, on the site or through the interface our website uses to fetch its data, and nobody is told. Whichever you choose, your notes, what you paid and when, any asking price you add to a coin in your collection, the most you would pay for a coin on your want list, and who has liked your collection are never shown to anyone else. Since 27 September 2026, this has been enforced in our database, not only on the site. Totals that name nobody, such as how many collectors want a coin or how many coins are collected on Florin House, still count private collections and want lists. The details you add in the insurance catalogue are kept separately and are private.

What stays private

Who voted on what. Everyone sees only the score.
Your collection notes, what you paid for a coin and when, and the most you would pay for a coin on your want list.
The words and pictures of threads and replies that are held for review or taken down: on Florin House, only their author and the moderators who can act on them can see them, and a held thread or reply is not shown to anyone else at all. A taken-down post's picture files are moved into private storage within about two hours; until then, and while a post is held, they stay at their web addresses, so anyone who already has one can still open it.
Who made a report. The person reported is never told, community moderators see the reason but not the reporter, and only the owner can see who made a report.
The record of moderation decisions, including what the automated check found. Only moderators see it; a warning is also sent to the person it is about. When we take down a private message, our record of it holds who sent it, when and why, never its words or pictures, and moderators are never shown who sent it.
Who you have blocked.
Community chat. Messages, the member list and who is typing are private to the members and never shown outside the room.
Invitations to group chats. Nobody can add you to a group chat: you are invited, you see who invited you and to which group, and you join only if you accept. An invitation stays open for 14 days. Only you can see it, and the person who invited you is not told whether you accepted, declined or ignored it, beyond seeing you in the group if you join.

How threads and replies are checked

Every thread and reply is checked by our own automatic rules when it is posted and when it is edited. They look for phone numbers, email addresses, links and wording that looks like arranging a deal off the platform, including in the name of any GIF you add, read together with your words, though they do not catch every one. What they find is held until site staff have looked at it; a post that is nothing but a contact detail or a link is refused. These rules run on our own systems.

After that, and whenever a thread or reply is reported, we send it to an AI model provided by Anthropic. We do not send it for a report of child sexual abuse or grooming, an intimate image or other illegal content, or while such a report about it is open: a person reads those. The table in section 5 lists exactly what is sent. The model suggests what kind of content it is (for example spam, an attempt to deal off the platform, a scam or counterfeit sale, harassment, illegal content, or one of the serious harms the Community rules list, such as child sexual abuse or grooming) and how sure it is, and we store its category, how sure it was and a one-line reason. It looks at one post at a time and is not used to build a profile of you. Only community threads and replies are checked this way, not messages, listings or profiles. If the check is unavailable, posts are published after our own rules alone. We also limit how many posts are sent to it each day, for each person and in total; past that limit, posts are published after our own rules alone and may be checked later.

Decisions made without a person. The automated check can take a thread or reply down on its own, with nobody involved, but only when it judges it to be spam, an attempt to deal off the platform or illegal content (which includes child sexual abuse material and terrorist material), and is at least 90% sure. You get a notification when it does, which says that a program made the decision, and a person looks at every takedown made this way within 3 days and either puts it back or keeps it down. Anything else it flags is passed to a moderator, the serious harms always to a person, and it never takes anything down because of a report or against a moderator's decision. You can ask for a person to review a decision made this way, tell us your side and challenge it, as section 7 explains. The Community rules explain how moderation and appeals work.

10. Children's privacy

If you are under 18: the short version

Anyone can read what you post in threads and replies, and see your name and picture beside it.
A computer program, including an AI made by a company called Anthropic, reads threads and replies to spot things that break the rules. It can take a post down. If it takes down yours, a person will check within 3 days, and if you think it got it wrong you can email us straight away.
People can see how many followers you have, but not who follows you or who you follow.
If your collection is public, people can see the coins in it and on your want list, the links on your profile and when you were last on the site, and collectors can be told when you want a coin they have or add a coin they want. If you make it private, other people can't see any of that and nobody is told, though someone you send a message to may be told you were online. Your notes and what you paid are only ever seen by you. Anyone can see your scores in the daily games.
Don't post anything that shows where you live or go to school, and don't tell people you don't know your age or address.
If someone makes you uncomfortable, block them and tell us at hi@florinhouse.com.
You can ask us to show you, correct or delete what we hold about you.

You must be 13 or over to have an account, and Florin House is not directed at children under 13. We do not ask your age when you sign up, so we cannot be sure that everyone is 13 or over. If you believe a child under 13 has an account or has given us personal data, please contact us and we will delete it. People aged 13 to 17 can use Florin House, so sexual content, content that encourages suicide, self-harm or eating disorders, and the other content listed in section 11 of our Terms of Service, are not allowed anywhere on it, for anyone.

11. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. For significant changes we will tell you by email.

12. Contact us

If you have any questions about this privacy policy or your personal data, please contact us at hi@florinhouse.com.