Privacy policy

Effective September 27, 2026. Operated by Casey / Mox Ledger (private beta). This is a practical policy for a private beta — not legal advice.

What we collect

• Account. When you sign in with Google we receive your Google account id, name, email, and profile image as provided by Google OAuth.
• Collection data. Cards, quantities, foil/condition flags, storage locations, trade-list settings, imports, and related preferences you enter or upload.
• Usage. Basic product activity needed to run the app (sessions, feature use, errors). We also use Google Analytics 4 for anonymized traffic when configured, so we can improve the product.
• Communications. Email address for account messages and optional digests or product updates if you enable them.

How we use it

We use this data to authenticate you, store and display your collection, price and organize holdings, power trade binder pages, send digests you opt into, improve reliability, and enforce invite-only access.

Where it lives

Application data is stored in our hosted database (Supabase / Postgres). Authentication is handled via NextAuth with Google. Hosting may use Vercel or similar providers. Subprocessors change as we grow; contact us if you need current details.

Cookies and session

We use session cookies (and related auth cookies) so you stay signed in. We do not sell personal data or run third-party advertising trackers on the product today.

Sharing

We do not sell your personal information. We share data only with infrastructure providers needed to run the service, when required by law, or when you publish something yourself (for example a public /u/ trade binder).

Retention and deletion

We keep account and collection data while your account is active. To request deletion or an export, email wajiw.casey@gmail.com. During beta, requests are handled manually.

Contact

Questions about privacy: wajiw.casey@gmail.com.