Privacy Policy

We collect information you provide directly, information generated as you use the Service, and information from third parties such as authentication providers. Specifically:

Account Information

When you create a Vault account we collect your email address, a unique user identifier, and authentication credentials (or tokens provided by Google or Apple Sign-In). We may also store account preferences and notification settings.

Profile Information

Your public profile may include a username, display name, avatar image, bio, and collector statistics. You choose what to share, and you can edit or remove this information at any time.

Collection and Inventory Data

We store the cards, sealed products, and other items you add to your vault, including condition, grade, acquisition cost, custom notes, photos, and organizational groups. This data powers your portfolio, valuations, and personalized insights.

Marketplace Listings and Transactions

If you list items for sale, send offers, or transact through Vault, we collect listing details, messages, shipping information (where required), order history, payouts, and reviews.

Images Uploaded for Card Scanning

When you scan a card with your camera or upload a photo, the image is processed to identify the card, extract attributes (set, number, grade), and may be retained to improve scanning accuracy and to attach to your collection or listings. You can delete uploaded images from your account at any time.

Analytics and Diagnostic Information

We collect technical data such as device type, operating system, app version, IP address, crash reports, performance metrics, and aggregated usage events. This helps us diagnose issues, prevent abuse, and improve the Service.

• Provide, maintain, and improve the Service.
• Authenticate users and secure accounts.
• Process marketplace listings, offers, orders, and payouts.
• Identify cards from uploaded images and generate valuations.
• Communicate with you about updates, support, and policy changes.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

We do not sell your personal information.

Vault supports sign-in with Google, Apple, and email/password. When you sign in with Google or Apple, the provider shares a limited set of information (such as your name, email, and a unique identifier) with us under their respective privacy policies. We do not receive your provider password. You can disconnect a provider at any time from Settings.

Vault uses Supabase (operated by Supabase, Inc.) as our primary backend infrastructure provider. Your account data, collection data, marketplace data, and uploaded images are stored in Supabase-managed databases and object storage hosted in secure cloud data centers. Data is encrypted in transit using TLS and at rest using industry-standard encryption.

We may also use vetted third-party processors for payments, email delivery, push notifications, error reporting, and analytics. These processors only receive the information necessary to perform their function and are contractually obligated to protect your data.

We share information only as described in this policy:

• With other users: public profile fields, listings, reviews, and messages you send through Vault.
• With service providers acting on our behalf (hosting, payments, analytics, customer support).
• For legal reasons: to comply with valid legal process or to protect the rights, property, or safety of Vault, our users, or the public.
• In connection with a business transfer such as a merger, acquisition, or sale of assets, subject to this policy.

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where retention is required by law (for example, transaction records).

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal information, and to object to certain processing. You can:

• Edit your profile and notification settings in the app.
• Export your collection from Settings.
• Request account deletion in-app from Settings, or by emailing support@vaultedtcg.app. Deletion is permanent and cannot be undone.
• Revoke camera, photo, or notification permissions in your device settings at any time.

Vault is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete the information promptly.

Your information may be processed and stored in the United States or other countries where Vault or its service providers operate. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice (such as an in-app message or email).

If you have questions about this Privacy Policy or our privacy practices, contact us at: