Privacy Policy

Prismint is a free tool for looking up trading cards, tracking a collection and comparing trades. It's run by [Company name] (placeholder, to be confirmed). In this policy, "we" and "us" mean the people who run Prismint.

This policy explains what we store about you, why, and what you can do about it. You can write to us at [Mailing address for legal notices] (placeholder, to be confirmed), or email popsikle+prismint@gmail.com.

When you create an account, we store your email address, the display name you choose and your password. Your password is stored scrambled, so nobody can read it, including us.

As you use Prismint, we store what you save. That means the cards in your collection, with any condition, storage spot or notes you add. It also means your storage setup and your saved trades.

You don't need an account to search, look at cards or build a trade. Doing that doesn't ask for any personal information.

When your browser talks to Prismint, our servers see its internet address and some technical details, like the browser type. We use these to keep the site running and to stop abuse.

Prismint is free and doesn't take payments. We never ask for or store card numbers, bank details or billing addresses.

Prismint doesn't use cookies. It uses your browser's own storage to keep you signed in and to save work in progress on your device, like a trade you're building before you sign in.

We don't use advertising cookies, third-party trackers or analytics scripts. We don't follow you across other sites.

To keep Prismint working and fast, we keep error reports when a page breaks. We also count a few anonymous events, like a search or a shared trade summary, and measure how fast pages load.

These reports carry no cookies and no account or device codes. They don't include your internet address or anything you typed into search. Pages are named by type, like "a card page", never by the exact address.

Google Cloud handles these reports for us and keeps them for about 30 days. Totals counted from them, with nothing about you, are kept for about six weeks.

If your browser sends Global Privacy Control or Do Not Track, we don't count events or measure page speed. Error reports still come through, because they carry nothing about you and help us fix what broke.

We use what you save to run Prismint for you. That means showing your collection, keeping card values current and comparing your trades.

We use your email address to sign you in and to answer you when you write to us. We use internet addresses and error reports to keep Prismint safe and working.

Where the law asks for a reason, ours are these: to give you the service you signed up for, to keep it secure and working well, and to follow the law.

We don't sell your personal information. We don't use it for ads, and we don't share it so others can show you ads.

When you mark a trade done, we use the agreed values, card conditions, where you traded, who you traded with as a kind, like another collector or a local store, and any cash. We combine this with other collectors' trades and never use it one by one to make Prismint values better.

Your name, contact details and account are never part of it. You can turn it off on your Profile with "Use my finished trades to improve values".

Card pages have a Buy on TCGplayer button. It's an affiliate link: Prismint earns a commission if you buy through it. Sellers there set their own prices.

When you tap it, Prismint counts the click. We keep one count per card version, per day and per place on the page. We don't store any personal information for it: no account, IP address, browser details or cookie. Like every visit, the tap also passes through our server logs, which we keep for about 30 days.

TCGplayer and its affiliate platform Impact set their own cookies on their own sites after the click, under their own privacy policies. Prismint itself still doesn't use cookies.

A few companies run parts of Prismint for us. They may use your information only to do that work.

Google Cloud hosts Prismint: its servers, database, file storage and logs. Google also hosts our support email, so it holds the messages you send us.

Resend sends the emails Prismint sends, using your email address and the message.

GitHub holds our code and builds the site. It doesn't get your personal information.

Card details, images and values come from outside market and image sources. We never send them anything about you.

Your collection, storage and saved trades are private to your account.

When you share a trade summary, anyone with the link can see it for 90 days without signing in. It shows the cards, their versions, conditions, quantities and values. It never shows your name or email address.

We share personal information only with the services listed above, or when the law requires it, like a valid court order. If Prismint is ever sold or merged, your information would move to the new owner, and this policy would still apply to it.

Your account, collection, storage and saved trades stay while your account is open. When you remove a card, we keep a note of it with your account so your history stays right. All of it goes when your account is deleted.

A sign-in lasts 30 days. A trade summary link stops working after 90 days.

Server logs and error reports are kept for about 30 days. Database backups hold copies for a short time after something is deleted, then they're replaced.

Emails you send us stay in our support mailbox while we need them to help you.

If you had an account in Prismint's early test version, we keep an archived copy of it. To have yours deleted, email popsikle+prismint@gmail.com.

We keep your account data while your account is active.

You can delete your account yourself: open Profile, choose Delete account and confirm with your password. You are logged out on every device at once, and your email can be used for a new account right away. Your collection, storage and trade summaries are removed for good in about 30 days. Trade links you already shared keep working until they expire, without your name.

Before you delete, you can download your data from Profile with Download my data: everything as one JSON file, and your collection as a CSV file.

You can also email popsikle+prismint@gmail.com from the address on your account, and we will delete it for you.

Wherever you live, you can ask us to show you the personal information we have about you, give you a copy, fix it or delete it. Email popsikle+prismint@gmail.com from the address on your account, and we'll answer within 30 days.

You can change what you save in Prismint at any time, and you can sign out on any device.

We won't treat you differently for asking. If you live in the EU, the UK or another place with a data protection authority, you can also complain to it.

Prismint runs on servers in the United States. If you use Prismint from another country, your information is sent to and stored in the United States.

Prismint uses encrypted connections (HTTPS). Passwords are stored scrambled. Only the people who run Prismint can reach the database.

No service is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

If this policy changes, we'll update the date at the top of this page.

If a change is important, like new kinds of information or a new use for it, we'll also tell you in Prismint before it takes effect.

Questions about privacy? Email popsikle+prismint@gmail.com.

You can also write to [Company name] (placeholder, to be confirmed) at [Mailing address for legal notices] (placeholder, to be confirmed).