Privacy Policy

Effective date: November 4, 2026

Trak Vault LLC (“Trak Vault”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our app, which allows users to track their collections and participate in buying, selling, or trading items. It should be read with our Terms of Use.

1. Information We Collect

a. Personal Information

We may collect personal information, including:

• Name
• Email address
• Username
• Profile photo (optional)
• Location (if you enable location-based features)

b. Collection & Trade Data

We may collect data related to your collection items, including:

• Item names, photos, and descriptions
• Trade history
• Buying/selling activity

b2. Marketplace Sellers and Buyers

If you sell in the Trak Vault Marketplace, we keep your legal name, date of birth and the US address your items ship from, and the details of your listings and sales. Your Social Security number and bank account details go straight to our payment processor, Stripe, on its own pages; we never see or store them.

If you buy in the Marketplace, you pay on Stripe’s checkout page. Your card details go to Stripe and never to us. Stripe tells us your name, email address and shipping address and whether the payment went through, and we keep those with your order.

When a card, sealed product, or binder or box is bought in the Marketplace, it moves from the seller’s collection to the buyer’s as soon as the payment goes through (and back again if the sale is cancelled, refunded or returned), and we keep a record of that: the date, the price, and who it went from and to. Anyone who has owned that same item through the Marketplace, before or after you, can see that record. They see your username only if your profile is public, never your name, email or address.

If you message a buyer or seller about an order, we keep the messages for 2 years, then delete them. Only the two of you can read them, apart from Trak Vault staff looking into a report or a dispute. We let the other person know about a new message by email and, if you allow it, a notification on your phone; neither of you sees the other’s email address.

We email you, and if you allow it notify your phone, about your own orders and account: a sale, an order confirmation, a shipment, a refund, a message, or a notice about your account. These are part of using the Marketplace, so they can’t be turned off while you buy or sell; push notifications can be turned off in your phone’s settings at any time.

If you review a seller, we keep your stars and words with the order. They are shown on the seller’s public profile with the card you bought and the date. Your username and profile picture are shown with them only if your own profile is public; otherwise the review says “Verified buyer”. You can change or remove your review at any time.

c. Device & Usage Information

• Device type and operating system
• Log data (e.g., IP address, access times, pages viewed)
• App crash reports and performance logs

d. Activity in the App

To see what is useful and what is not, we record how the app is used, such as:

• Which links you click, including links to shops and other sites outside the app
• Which cards, sets and other items you view
• Which pages and features you use

We use this information only to improve the app and make it easier to use. We do not sell it, share it with advertisers or use it to build advertising profiles about you.

e. Ads From Google

Some ad spaces in our iPhone, iPad and Android apps and on our website show ads from Google (Google AdMob in the apps, Google AdSense on the website). We do not give Google your personal information. Your name, email address, account, collection, the cards you view and everything else you keep in Trak Vault stay with us. We do not send them to Google or use them to choose the ads you see.

To show and count its ads, Google’s software in the app and on the website collects some information directly from your device or browser. It does this whenever one of its ads is loaded and shown, not only when you tap one:

• Your IP address, and the rough location that comes from it
• Your device type, operating system, language and app or browser version
• In the apps, your device’s advertising ID, if your device settings allow it (on iPhone and iPad, only if you allow tracking when asked)
• On the website, cookies and similar identifiers that Google stores in your browser
• Which ads were shown to you and whether you tapped them
• Crash and performance information about the ads

Google uses this information to show and measure ads, to prevent fraud and, if you allow it, to show ads based on your activity in other apps and websites. How Google handles it is covered by Google’s Privacy Policy and how Google uses information from sites and apps that use its services. You can limit it with the choices in section 4.

f. Ad Views and Taps

For every ad in the app and on the website, including Google’s, we count how many times it was shown and tapped each day, so we can report to advertisers and fill our ad spaces fairly. Advertisers see only these totals, never who saw or tapped their ad.

g. The Trak Vault Twitch Extension

Our Twitch Extension shows the cards in a stream when you hover over or tap them, on Twitch’s website and in the Twitch app. It does not ask Twitch who you are and does not collect, store or send us any personal information about you. Twitch gives every extension an anonymous session ID; ours does not use or keep it.

• Card pictures load from our image storage, which, like any website, receives your IP address and browser details when it sends a picture. We do not link these to you.
• If you hide the card spots, that choice is remembered in your browser’s storage on your own device, and nowhere else.
• Links in the extension open our website, which this Privacy Policy covers. Twitch’s own handling of your information is covered by Twitch’s privacy notice.

2. How We Use Your Information

We use your information to:

• Provide and improve our services
• Personalize your app experience
• Facilitate trades, sales, and purchases
• Communicate with you about app updates or account issues
• Monitor usage and prevent fraud or misuse
• Build market prices from anonymous, aggregated purchase and sale prices that you choose to share (for example when you add a captured order with the browser extension, or say what a card sold for when you remove it from your collection), with nothing that identifies you attached. An order or listing number you give is only used to check that a sale happened; it is kept with your own collection history, and is never shared
• Show ads, and count how often each ad is shown and tapped (see section 1f)

We do not use your information for any purpose that is not listed above.

3. How We Share Your Information

We do not sell your data to advertisers or to any other third party. This includes the activity information described above. Advertisers who place ads with us directly (see our Terms of Advertising) do not receive information about you, only the totals described in section 1f. Google collects information from your device through the ads it shows, as described in section 1e, but we do not give Google your personal information. We may share your information:

• With other users (e.g., profile name and collection details if you choose to make them public)
• With service providers that help us run the app (e.g., cloud hosting, Resend, which sends our emails, and Expo, which delivers push notifications to your phone)
• With Cloudflare, when you use the Shop on our website without signing in: its Turnstile check looks at your browser (not your account) to tell people from automated programs, so that live eBay listings are not used up by bots
• With Stripe, only if you choose to sell in the Marketplace: when you start payout setup (“Continue with Stripe”), we send Stripe your email address, legal name, date of birth and address so its form is filled in for you, and you check them there. We do not send Stripe these details unless you start payout setup
• With the seller of an item you buy in the Marketplace: your name and the shipping address you gave at checkout, so they can send it to you. Sellers may use them only to ship your order. Buyers see a seller’s username, profile picture, when they joined, how many cards they have sold, their reviews and the city and state they ship from, never their email, address or date of birth
• When required by law or to protect our rights

Our promise: your data is never sold

We never sell the data you give us, to anyone. Your name, email address, phone number, collection and any other personal details you choose to share with us stay with us. They are never sold, and never shared with third parties without your consent or knowledge.

When information is shared for advertising, it is limited to the device and ad information below, and it never includes your name, email address, phone number or any other personal details you have shared with us. You decide how much of it is used: where the law requires it we ask you first, on iPhone and iPad we ask before allowing tracking, and you can say no at any time. It may include:

• IP address: used to estimate the general location of your device and to route network traffic.
• Device and account identifiers: your device’s advertising ID (the Android Advertising ID, or Apple’s Identifier for Advertisers if you allow tracking), app set ID, and identifiers linked to Google accounts signed in on the device.
• How you use the app and its ads: for example app launches, taps, clicks, screen views and video views.
• Diagnostic information: performance and crash information, such as how long the app takes to open, how often it stops responding, and energy use.
• App and ad space details: the app’s ID, the kind of content around the ad, the size and type of the ad space, publisher information and how the ad space is offered to advertisers.
• Network and device information: your device model, operating system version, the state of the app or browser, and your connection type.

You can change your mind at any time. You can withdraw your consent whenever you like, from Ad privacy choices on your Edit user page or in your device’s settings (see section 4), and we will respect your choice.

4. Your Choices

• Profile Visibility: You can manage what parts of your profile and collection are public.
• Notifications: You can choose to receive or disable notifications from the app.
• Data Access/Deletion: You can request access to your data by contacting us or emailing trakvaultadmin@trakvault.app. You can delete your account yourself in the app (Settings, then Delete account) or on our website at trakvault.app/settings/delete-account.

Ads from Google

• Consent: where the law requires it (for example in the European Economic Area, the UK, Switzerland and some US states), the app and the website show Google’s consent or opt-out form before Google’s ads use your information. You can change your choice at any time from Ad privacy choices on your Edit user page.
• iPhone and iPad: the app asks before allowing tracking. If you say no, Google does not get your device’s advertising ID. You can change this at any time in Settings, then Privacy & Security, then Tracking.
• Android: you can delete your device’s advertising ID, or stop apps from using it, in your device’s settings (usually Settings, then Privacy, then Ads, or Settings, then Google, then Ads).
• Website: you can also block or delete cookies in your browser’s settings.
• Personalized ads: you can see and change how Google personalizes ads for you at My Ad Center.

Under some US state privacy laws, such as California’s, letting an ad provider like Google collect information through the app or the website to show ads based on your activity elsewhere may be called “sharing” personal information for targeted advertising. We do not sell your personal information. You can opt out of this sharing with the choices above.

When you delete your account

• 30 days to change your mind: your profile goes private and your listings come down straight away, and you are signed out. If you sign in again within 30 days, your account is restored as it was. After 30 days it is deleted.
• What we delete: your sign-in, profile, collection, wish list, watchlist, settings, saved addresses and the other information tied to your account.
• What we keep, without your name: binders, boxes and decks you made, with the cards in them, are kept but no longer linked to you. Reviews you wrote stay up, shown as from a former member. Marketplace orders you bought or sold are kept for 7 years, which we need for tax and payment-dispute records; the shipping name, address and email on them are erased 90 days after the order is finished.
• Fraud prevention: if your account was stopped from selling or closed for breaking our terms, or had a payment dispute (chargeback), we keep a scrambled (hashed) copy of your email address and phone number for 2 years after the account is deleted. It can only be used to recognise the same email or phone number if it is used again; it cannot be turned back into the original.
• Stripe: if you sold in the Marketplace, Stripe keeps its own records of your payout account under its own privacy policy and legal obligations.

We may also keep information when the law requires it, or to deal with an open dispute, report or legal claim; until those are settled, an account with one open cannot be deleted.

5. Security

Protecting your information is a core part of how we run Trak Vault. We use industry-standard safeguards, including:

• Encryption in transit: information sent between the app and our servers travels over encrypted connections.
• Secure hosting: your data is stored with reputable cloud providers that protect their infrastructure with access controls and monitoring.
• Restricted access: only the people and services that need your information to run the app can reach it, and your payment card details are never stored by us (see Terms of Use).
• Careful sharing: we only share your data in the limited cases described in section 3.

No system is completely secure, and we cannot guarantee that your information will never be accessed without permission. You can help by choosing a strong, unique password, keeping your login details private and signing out on shared devices. If you think your account has been compromised, or you find a security problem, please contact us right away. If a breach affects your information, we will tell you as the law requires.

6. Children’s Privacy

Our app is not intended for children under 13 (or the age of digital consent in your region). We do not knowingly collect data from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll notify you of any major changes via the app or email.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, use our contact form or reach us at:

• Email: trakvaultadmin@trakvault.app
• App Name: Trak Vault
• Company Name: Trak Vault LLC

All Trak Vault legal documents