Privacy policy
Draft for review: every highlighted [gap] must be completed and the page reviewed before FlexTCG is released.
Effective [DATE]
Who runs FlexTCG
FlexTCG is operated by [LEGAL OPERATOR AND POSTAL ADDRESS]. For privacy questions, account help or data requests, contact privacy@flextcg.app or visit flextcg.app/support.
What we use
To run your account we use your sign-in identity, your account identifier and, where your sign-in provider supplies it, your email address. We store your username and the profile details you choose to add, such as display name, biography, country and area, favourite character and social handles; your collection and card settings; the prices you paid and your private notes; your wants; your offers, messages and trade reviews; your blocks and reports; your notification settings and this device's notification token.
We use this to keep your collection, show what you choose to make public, match you with collectors, run offers and conversations, send the notifications you turn on, and deal with abuse. If you send a bug report from the app, it includes your device model, iOS version and app version, so we can reproduce the problem.
What other people see
Other collectors, and anyone with your link at flextcg.app/yourname, can see your public profile and the cards you've marked public, with their estimated values unless you hide them. Private cards, what you paid and your notes are only ever visible to you. Offer conversations are visible to the two collectors in them and, if one is reported, to moderators. Reports are never shown to the collector reported.
Blocking someone stops all interaction between your two accounts. Public information can still be seen by anyone who isn't signed in.
Who helps us run it
- Supabase hosts accounts and the database, in [HOSTING REGION].
- [EMAIL PROVIDER] delivers sign-in emails.
- Apple provides Sign in with Apple and delivers push notifications.
- Cloudflare serves this website.
- Card images and market prices are loaded from [PROVIDER LIST]. These providers receive the network information needed to answer a request, such as your IP address.
Service logs and diagnostics: [WHAT IS LOGGED, WHY, WHO CAN ACCESS IT AND FOR HOW LONG]. FlexTCG contains no advertising or cross-app tracking.
On your device
Card scanning happens on your iPhone; camera images aren't uploaded to FlexTCG. The app keeps a copy of your binder for offline use and clears it when you sign out or delete your account. Pack simulator history and preferences stay on your device and aren't linked to your account.
Your choices
In the app you can mark cards private, hide estimated values, turn notifications on or off, block collectors, report content and permanently delete your account (Profile → Settings → Delete account).
Deleting your account removes your profile, collection, wants, blocks, reports involving you and your offer conversations from the live service. The other collector in a conversation loses access to it. Cards already traded to someone else stay in their binder. Payments and shipping arranged outside the app aren't affected. Backups and logs: [RETENTION PERIODS AND HOW DELETED ACCOUNTS STAY DELETED AFTER A RESTORE].
For a copy of your data, corrections or other requests, contact privacy@flextcg.app. Your rights where you live: [REGIONAL RIGHTS, INTERNATIONAL TRANSFERS, COMPLAINTS AUTHORITY, MINIMUM AGE].
Changes
[HOW MATERIAL CHANGES WILL BE ANNOUNCED]