Privacy

CardQuest is a group card binder. The person who creates the account is an adult. This page says what the server stores today, in ordinary words. CardQuest is made by Hive Creative LLC, which is responsible for the data described here.

What we store

If you sign in, we store the account email. Sign-in can be a one-time code and a link. The Primary seat can also set one optional seat password for the account. We store a hash of that password, not the password itself. A reset link goes only to the account email. Changing or removing the password signs other devices out.

Seats on the account can have first names or nicknames, avatars, cards, notes, and card photos when those photos are synced to the account. We also store XP, streaks, collectible badges, decks, and learn progress for those seats.

If you pay on the website, Stripe handles the card. CardQuest stores the subscription status needed to turn Premium on or off. We do not store the full card number.

If you subscribe in the iPhone, iPad, or Android app, Apple or Google handles the payment. CardQuest stores what it needs to turn Premium on or off: the product, the subscription status and renewal date, and the store's purchase id. We never see your card or your store password.

The store finder uses your location only when you tap Use my location. In the apps, your device asks for permission first, and CardQuest asks only for approximate location. Before it leaves your device, the location is rounded to an area about 5 to 7 miles across, so CardQuest never receives your exact position. We keep only a rough map area, about 30 miles across, to speed up later searches. We do not keep the location itself. A zip code works just as well.

Notifications in the apps

Notifications are off until the Primary seat turns them on in the iPhone, iPad, or Android app. When they are on, the device gives CardQuest a device token. A device token is an address Apple or Google uses to deliver notifications to that one app install. It is not your phone number and it does not show your location.

With the token we store whether the device is Apple or Android, which seat was active, the time zone (so nothing arrives between 9 PM and 8 AM), and which notifications are on. For Premium price alerts we also store the cards and prices you asked to watch. The evening streak reminder reads the seat streak already stored for that seat (the days that counted). We keep a short list of what was already sent so you don't get the same one twice.

We use the token only to send the notifications you picked: price alerts, the weekly report, team goals, a level up, a new badge, an evening reminder when a play streak is about to end, release reminders, and Premium restock alerts. Never ads or promotions. Apple and Google deliver them. A level up, a new badge, and a streak reminder name that seat (the first name or nickname already saved on the account) and can show on the lock screen. Those three together stay under three a day.

A release reminder names the set and the day. A restock alert names the sealed product and the store, and only goes to Premium accounts that asked to watch that product. We store those products, the releases you asked to be reminded about, and a zip code the account owner types so we can check stores in that area. We do not ask a kid seat for location. Nothing is sent between 9 PM and 8 AM. Restock alerts do not include comments or other people's names.

To turn notifications off, open Settings in the app and switch them off under On this device. When every switch is off, the token is removed from our server. You can also turn off notifications for CardQuest in your phone or tablet's settings. The token is also removed when you sign out on that device, when you sign out of all devices, or when Apple or Google says it no longer works. It is deleted with the account. A token that isn't refreshed for 180 days expires on its own.

On the website, the Primary profile can turn on the same alerts in Settings. The browser then gives CardQuest a push subscription for this site: an address the browser uses to deliver alerts to this one browser, plus the keys that seal the message. It is not your phone number and it does not show your location. On iPhone and iPad, add CardQuest to the Home Screen and open it from there before alerts can be turned on. Turn them off in Settings and the subscription is removed. It is also removed when you sign out, when the browser says it has expired, and it is deleted with the account.

Offline binder copy in the apps

The iPhone, iPad, and Android apps save a read-only copy of the binder on the device, so you can still look through it when CardQuest can't connect. It holds seat names and colors and, for each card, its name, set, number, rarity, finish counts, and Keep / Trade / Sell counts, plus small card images. It does not include prices or values, photos, notes, emails, or sign-in details. The website does not make this copy.

The copy stays in the app's own storage on that device. CardQuest never uploads it, and it is never read back into the account, so it can't replace your saved binder. Cards can't be changed from it. It refreshes while the app is online and the binder changes.

The copy always matches the binder saved on that device. Reset binder in Settings empties it, and uninstalling the app removes it. Signing out doesn't remove it, because signing out leaves the binder on the device. Deleting the account in the app clears the copy. If a local binder is still on the device afterward, the app saves a new copy of it until you reset the binder. Like other app data, the copy can be part of the device's own backup.

Who helps run CardQuest

Upstash stores the account and synced seat data. Vercel hosts the app. Stripe processes website payments. Apple and Google process App Store and Google Play payments and deliver app notifications. Resend sends sign-in and report email. Those companies process data so the product can work. We do not sell personal information.

The store finder uses OpenStreetMap services. To find nearby shops, our server sends Nominatim and Overpass the zip code you typed or the rounded location area, about 5 to 7 miles across. No account data or names are sent. The map loads its tiles from OpenFreeMap, so when the map shows, your device connects to OpenFreeMap and it receives your device's IP address and the map area being shown.

Our server uses IP addresses briefly for rate limiting and abuse prevention, such as limiting how often sign-in codes or store submissions can be requested. These counters expire after a short window. IP addresses are not used for tracking, advertising, or profiling.

Links, cookies, and trackers

On the website, some shop links go to eBay, TCGplayer, or Amazon. Those are affiliate links, so CardQuest may earn a commission. After you click one, that site may set its own cookies. The iPhone, iPad, and Android apps don't show these links. CardQuest does not show ads and does not use advertising or analytics trackers.

The app keeps a sign-in cookie in the browser so you stay signed in. If you vote on which game we should add next, a random cookie remembers that device's vote so it counts once. If you open a store's counter code, a cookie remembers that store for 30 days so a new account can get the store's trial. None of these are ad cookies.

How long we keep it

Account data stays while the account is open. A sign-in code expires after 10 minutes. A sign-in link expires after 15 minutes. A browser session lasts up to 60 days from the last visit, and signing out of all devices ends it sooner.

When you delete the account, we delete the account record and the server copies tied to it. A backup or a log on a provider may take a short time to age out. We don't promise a specific number of days for those leftover copies.

Download and deletion

The Primary seat can download a JSON file of the server-side data and can delete the account. Deleting cancels a website subscription, then removes the account. An App Store or Google Play subscription is canceled in your store account. The browser on a device may still keep a local copy until that device is reset, and on another device the app's offline copy stays until the app is removed. See Delete your account for the steps, or ask support to do it for you.

Children's privacy

The account holder is an adult parent or guardian, 18 or older. Kids use seats under that account. CardQuest does not offer child accounts and does not collect a child's email. Seat names should be first names or nicknames, not full names. The parent or guardian is responsible for the seats on the account and for what gets typed into them.