Privacy Policy
Last updated: April 2026
What We Collect
When you sign in with Google, we store:
- Your Google account ID (used as your user identifier)
- Your display name and email address
- Your profile picture URL
When you use Magikard, we store:
- Your Pokemon TCG collection data (cards added, tiers, quantities, notes, prices paid)
- Friendship connections and shared collection preferences
- Badge progress and activity logs (adds, upgrades, removals)
- Pro subscription status and support amount (if applicable)
- Display preferences (theme, binder color, binder columns)
How We Use Your Data
- Authentication — Your Google ID and email identify your account.
- Collection tracking — All collection data is used solely to provide the app's core functionality.
- Social features — Your display name and avatar are shown to friends. Email is used to match friend invites.
- Payments — Pro checkout is handled by Stripe. We store your support amount and Pro status but never see or store your payment details.
Third-Party Services
- Google OAuth — Authentication. Subject to Google's Privacy Policy.
- Stripe — Payment processing. Subject to Stripe's Privacy Policy.
- Azure — Hosting and data storage (Azure SQL, Azure Blob Storage).
- PokemonTCG.io / TCGdex / PokeAPI — Card and Pokemon data. No personal data is shared with these services.
Data Retention & Deletion
Your data is retained as long as your account exists. You can delete your account and all associated data at any time from your Profile page. Account deletion is permanent and removes:
- Your user profile
- Your entire collection (all entries, quantities, and notes)
- All activity logs and badge progress
- All friendships and shared collection links
- All set tracking data
Cookies
We use a single authentication cookie to keep you signed in. It is HTTP-only, secure, and expires after 30 days. We do not use tracking cookies or third-party analytics cookies.
Contact
For privacy-related questions or data requests, email us at splash@magikard.app.