Privacy policy

The short version

• This landing site (sealedgrid.com) sets no cookies and has no analytics, advertising, trackers or third-party scripts. Everything it loads comes from our own address.
• The iPhone app keeps your collection on your device. It has no analytics, advertising or tracking.
• If you sign in on the website, we store what you add to your collection on our server so you can see it in your browser. We keep only what is described below.
• We do not sell your personal information and we show no ads.
• You can delete your data, and ask us about it, at any time. See “Deleting your data”.

This website

The pages at sealedgrid.com are static files. They have no sign-in, no tracking and no analytics. If you pick a light or dark appearance on a page that offers it, your choice is saved in your own browser (local storage) and never sent to us. Fonts, pictures and scripts are served from our own address.

Our host, Cloudflare, delivers the site. When your browser asks for a page, Cloudflare handles your IP address and the request details to deliver it and to protect the service from abuse, and it keeps standard security and request logs under its own terms and privacy policy. We do not run our own analytics and we do not use those logs to build profiles of visitors.

Card pictures and set logos in the web app and the iPhone app are served from images.sealedgrid.com, an address of ours that Cloudflare also hosts. Loading a picture shows that address your IP address and the picture requested, as for any website. The landing page itself does not load card pictures from it.

The support form

When the support form is open, we receive the topic you choose, your message, the optional reply email you type, and the time. We use them only to answer you. We delete the stored copy after 90 days. A notification email copy and backups kept by our hosting provider may be kept a little longer, and you can ask us to delete them. We do not store your IP address or browser details with the message. Cloudflare processes the form, its database and the notification email, and its rate limiter sees your IP address while you post. Please do not put passwords, sign-in codes, payment details or a full collection export in a message.

The iPhone app

Your collection, wishlist, scans, settings, value history, alerts and events stay in a database on your device. The camera and any photos you choose are read on your device to recognize cards; they are not uploaded to us. Location is used only if you tap “Use my location” on the Events screen, as one rounded approximate reading kept in memory, and the search area is sent to Apple Maps to find shops. The app can export a backup file that you save where you choose; it is not encrypted and we never receive it. Settings > Delete all my data removes everything the app stores on the device. It does not delete backup files you already saved to Files, iCloud Drive, AirDrop or anywhere else outside the app; delete those yourself.

Some features load content from other companies, which see your IP address as any website does: Apple Maps for shop and city search, our picture host (images.sealedgrid.com) and, for some cards, TCGdex for card pictures, and the websites behind links you tap (for example TCGplayer or eBay pages). We do not send them your collection.

Signing in on the website

You can sign in with Apple, Google or Discord. Each sign-in method makes its own account. We do not join accounts automatically, not even when two methods use the same email address: signing in with Google and later with Discord creates two separate accounts, each with its own collection.

• Google: your Google user id and your verified email address. Nothing else from your Google profile.
• Discord: your Discord user id and your verified email address. Nothing else from your Discord profile.
• Apple: the user id Apple gives us for you. We do not request your name or email from Apple.

We use these only to recognize you when you come back. We do not send you email. The provider you choose sees that you signed in to Sealed Grid under its own privacy policy. We never receive your provider password. You must be 13 or older to make an account; we ask you to confirm this when you sign up and we do not check it further.

What we keep when you have a website account

What you add to your collection is saved on our server under your account: cards, wishlist, folders, sealed products, value points and badges, plus your nickname and display settings, including any text you type (notes, storage places, folder names).

• Undo copies (24 hours). When you do a bulk action, such as an import or removing several cards, we keep a copy of what it changed for 24 hours so Undo can reverse it. That copy can include text you typed on removed cards. It is deleted automatically after 24 hours, and with your account.
• Deleted-card markers (180 days). When you delete a card or folder, we keep a small marker (the kind of item, its id and a number, with no card details or text) for 180 days. It is deleted with your account.
• Payments. If paid plans are offered, payment is handled by Paddle, the seller of record, which sees your payment and billing details. We keep only the plan, its status and dates, and Paddle’s ids, plus a short record of each message Paddle sends us (an id, a type, a time and the outcome, never its contents) for about 30 days. Paddle keeps its own records under its own policy.

Prices

Prices are in US dollars, with the source and the time they were fetched. They come from third-party sources and are information only. Looking at a price does not send the source anything about you from our pages.

Deleting your data

• On the iPhone: Settings > Delete all my data. It cannot be undone, and we hold none of the app’s data on a server.
• On the website: delete your account from the Account page. This removes your account and the data described above from our live systems. Cloudflare may keep database recovery copies for up to 30 days after deletion before they expire; we do not restore a deleted account from them. After you delete, we also keep a keyed, one-way fingerprint of your sign-in id for up to 48 hours, only so that the one-import-per-48-hours allowance cannot be reset by deleting and re-creating an account. We cannot recover your sign-in id from it, and we never use it for advertising or profiling.
• Anything else: ask us through the Support page or the email below, and tell us which sign-in method the account uses. If you want a copy of your data or want it corrected or deleted, ask and we will answer within one month.

Children

Sealed Grid is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. If you think a child has made an account, contact us and we will remove it.

Changes

If we start collecting or sending data in a new way, for example analytics or a new sign-in provider, we will update this page before that change reaches you. The date at the top shows when it last changed.

Contact

Use the Support page. Operator: Viridian Labs LLC.

Email: privacy@sealedgrid.com