Grading · Privacy policy
Scope
The Grading team processes information to turn photos into collectible cards and provide AI analysis, progression, fusion and battles. Contact: [email protected]. Effective October 14, 2026.
Information processed
We process a random device account identifier, server account ID, card names, uploaded images, analysis results, collectibles, game progress, language preferences and service activity records. Push notifications use a notification token and your delivery preference. Optional Google or Apple linking processes account identifiers and information needed for sign-in.
Purposes
Information supports authentication and linking, card storage and AI analysis, game progress, notifications, troubleshooting and abuse prevention. Camera and photo access are requested when you take or choose a photo. We do not automatically upload your entire photo library.
Images and AI
Images are stored in Cloudflare R2 and delivered through its CDN. Images and descriptions needed for analysis may be sent to the AI service performing that analysis. Anyone who knows a file URL can open the uploaded image: avoid uploading identity documents, faces, addresses or other information you do not want to disclose. Sharing sends your selected card and link to the service you choose.
Providers and ads
Cloudflare provides file storage and delivery, Google Sign-In and Sign in with Apple provide account authentication, Google Firebase provides push services, and Google AdMob provides ads. Advertising SDKs may process IP addresses, device identifiers, ad interactions and diagnostics. Development builds use Google test ads; Android and iOS release builds use platform-specific live ad units. Where required, consent is checked before requesting ads and privacy choices are available in app settings. Processing by providers may transfer information to servers abroad.
Retention and deletion
Account and card information is retained while needed to provide your account's service. You can initiate deletion of your account and associated data directly in app settings; the operations team confirms the result within 30 days. You can also email us to request access, correction or withdrawal of consent. Records required by law are deleted after their required retention ends. Uninstalling the app does not delete information stored on our servers.
Your choices
Change camera, photo and notification permissions in device settings and turn off push delivery in the app's settings. Google and Apple linking are optional; you can start with a device account. If you lose a device account's sign-in information, recovery may be difficult.
Protection and changes
We use access controls and encrypted communications and process information needed for service operations. We update this policy when processing practices or providers change. Child sexual abuse and exploitation content and unauthorized disclosure of another person's personal information are prohibited.