PRIVACY POLICY

Account information. Your username, a securely hashed password, your account role or plan, and the date your account was created. We never store your password in readable form.

Content you enter. The card and pack records you create — card name, set, pack type, rarity, hit type, date opened, estimated value, notes — and your leaderboard visibility preference.

Camera scans (Premium only). If you use the camera card-scan feature, the photo you take is transmitted securely to our AI provider solely to identify the trading card for your pricing search. Photos are processed in real time and are not stored on our servers, linked to your account, or used to identify people. Using the feature is optional — you can always type a card name manually instead.

Purchase information. If you buy a paid plan, our payment processor collects your payment and billing details and shares limited information with us (such as your email address, the plan purchased, transaction amount, status, and the last digits and type of card). We do not receive or store your full payment card number.

Technical information. Standard server and security logs, which may include IP address, browser and device type, pages requested, timestamps, and error details.

We do not knowingly collect information from children under 13, and we do not request sensitive categories of personal information such as government identifiers, health, or financial account data.

• to create and secure your account and authenticate you;
• to store and display your pack records, totals, and price lookups;
• to show leaderboards, if you have chosen to appear on them;
• to process purchases, renewals, refunds, and to prevent payment fraud;
• to provide support and respond to your requests;
• to monitor, debug, and improve reliability, performance, and security; and
• to comply with legal obligations and enforce our Terms.

We do not sell or rent your personal information, and we do not use your card records for advertising or share them with advertisers.

Where data protection law such as the GDPR or UK GDPR applies to you, we process your information to perform our contract with you (providing the Service), to pursue our legitimate interests (security, abuse prevention, product improvement), to comply with legal obligations, and, for optional features such as leaderboard visibility, with your consent — which you may withdraw at any time.

We share information only with service providers who process it on our behalf under confidentiality obligations, and only as needed to run the Service:

• Hosting and database provider — stores your account and card records and serves the website.
• Paddle.com — our online reseller and Merchant of Record for the sale of Premium, handling checkout, subscription management, payments, tax compliance, invoicing, and refunds. Paddle is a separate data controller for the payment data it collects.
• Card marketplace data sources — receive the card search terms needed to return pricing results. Your username and personal details are not sent with these lookups.
• AI provider — processes camera-scan photos in real time to identify trading cards. Photos are not retained or used for any other purpose.

We may also disclose information if required by law or valid legal process, to protect our rights, users, or the security of the Service, with our professional advisers (legal and accounting), or in connection with a merger, acquisition, or sale of assets — in which case we will notify you of any material change to how your information is handled.

If you opt in to a leaderboard, your username and aggregate pack and hit counts are visible to other signed-in users. Turning the setting off removes you from all leaderboard views.

We use only the storage and cookies necessary to operate the Service — primarily to keep you signed in and to remember your session and preferences. We do not use third-party advertising or cross-site tracking cookies. Clearing your browser storage will sign you out.

We keep your account and card records for as long as your account is active. If you ask us to delete your account, we delete your account and content within 30 days, except where we must retain limited records (such as transaction and tax records) to comply with legal obligations or resolve disputes. Security logs are kept for a limited period and then discarded.

Access to the database is restricted by row-level security rules so that your records are only readable by your own account and by an administrator where necessary to operate the Service. Passwords are stored hashed, and traffic to the website is encrypted in transit. No online service can be guaranteed completely secure, so please use a password you do not reuse elsewhere and tell us promptly about any suspected unauthorized access.

Our providers may store and process data in the United States and other countries. Where required, transfers are made under appropriate safeguards such as standard contractual clauses.

You can view, edit, and delete your card records at any time inside the app, and change your leaderboard visibility whenever you like. Depending on where you live, you may also have the right to request access to your personal information, correction of inaccurate data, deletion, a copy of your data in a portable format, restriction of or objection to certain processing, and to not be discriminated against for exercising these rights.

To make a request, email Packtrackerpro@gmail.com from your account email address. We will respond within 30 days. You may also have the right to complain to your local data protection authority.

We may update this Privacy Policy as the Service evolves. We will revise the "Last updated" date above and, for material changes, provide notice in the app or by email where appropriate.

Anthony DeSiata, owner of packtrackerpro.com — Packtrackerpro@gmail.com. For privacy questions, use the subject line "Privacy request".