Privacy policy

Signing in with Google gives us exactly four things:

• Your Google account ID, a number Google uses to identify you. This is how we recognise you when you come back.
• Your email address, so we can contact you about your account and you can recognise which account you are in.
• Your display name.
• The web address of your avatar picture. We store the address, not the picture.

We never receive your Google password, and we cannot read your email, contacts, calendar, files or anything else in your Google account. We ask Google for sign-in, your email address and your basic profile, and nothing more.

Which card printings you have marked as owned, and the date and time you marked each one, as a list of printing identifiers against your account.

If you lay out a binder of your own, we also store which card you put in which slot, and when you put it there. That is a second list of printing identifiers, and it says nothing about whether you own those cards.

We do not store notes, conditions, purchase prices, valuations or photographs, because MasterSet does not have those features.

If you use MasterSet without an account, your marks are stored in your own browser and never sent to us. They stay on that device until you sign in, at which point they are added to your account. Clearing your browser data deletes marks that have not been signed in and synced, and we cannot recover them.

We use as few as the service can work with.

• A session cookie, set when you sign in. It holds a signed token identifying your account so you stay signed in between pages. It is necessary for the service to work and cannot be turned off while you are signed in.
• Short-lived sign-in cookies, used during the trip to Google and back to stop the sign-in being tampered with. They are discarded once you are signed in.
• Storage in your browser, holding your marks when you are signed out, and small preferences such as which filter you last used on a set. This never leaves your device on its own.

There are no advertising cookies and no tracking cookies, which is why there is no cookie banner.

We use Vercel Web Analytics, and nothing else. It counts page views so we know which sets people look at and whether anyone is using the site at all.

What it records for each page view:

• The page you looked at, and the site you arrived from.
• Your country, your browser and whether you are on a phone or a computer. Not your town, and not your IP address, which Vercel discards after turning it into the identifier below.
• A visitor identifier that is derived from your device and thrown away daily. It cannot be traced back to you, it is not shared with any other site, and it does not survive to tomorrow.

It sets no cookies and builds no profile. It never sees your email, your account or which cards you own. There is still no advertising and no third-party tracker.

These companies process data on our behalf so the service can run. They are not allowed to use it for their own purposes.

• Vercel: Hosting and content delivery. Their privacy policy
• Vercel Web Analytics: Counts page views. No cookies, no IP address kept, no profile built. Their privacy policy
• Neon: The Postgres database where accounts and collections are stored. Their privacy policy
• Google: Sign-in. Google tells us who you are; we never see your password. Their privacy policy

Card images load directly from the card data source’s servers, which means those servers see your IP address the way any website you visit would. We do not send them anything about you.

We do not sell your personal information, and we do not share it for advertising or for cross-context behavioural advertising. We have never done so. There is no opt-out to offer you because there is nothing to opt out of.

• Your account: Until you delete it. Deleting your account removes the record immediately.
• Your collection: Until you delete it, or until you delete your account, whichever comes first.
• Your sign-in session: Thirty days, after which you are signed out and sign in again.
• Server request logs: Request logs held by our hosting provider expire on their schedule, currently about a month.

Your account page has a button that downloads your whole collection as a JSON file, straight away, with no request to make and nobody to ask.

Your account page also has a delete button. It removes your account record and every mark attached to it from our database immediately. It is not a flag, not a queue and not a thirty-day grace period. The rows are gone, and we cannot undo it for you.

If you would rather not do it yourself, or you cannot sign in, email calebbertumen99@gmail.com from the address on the account and we will do it for you.

Backups taken by our database provider before the deletion expire on their own schedule. We do not restore deleted accounts from them.

MasterSet is not for children under 13, and we do not knowingly collect anything from them. If you believe a child under 13 has an account, email calebbertumen99@gmail.com and we will delete it.

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or give you a copy in a portable format. The account page does the last two instantly; for the others, email calebbertumen99@gmail.com.

If you are in the UK or the EU, you have rights under the UK GDPR and the EU GDPR to access, rectification, erasure, restriction, portability, and to object to processing. Our lawful basis is performance of a contract with you: we cannot run your collection without storing it. You also have the right to complain to your national data protection authority.

If you are in California, you have rights under the CCPA and CPRA to know what we collect and why, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information, so there is no “Do Not Sell or Share” action to take. The categories we collect are identifiers (your Google account ID and email) and internet activity limited to your own use of MasterSet.

We do not charge for any of this, and we will not ask you to create anything extra to make a request. We answer within thirty days.

Our database and servers are in the United States. If you use MasterSet from outside the United States, your data is transferred there and processed there. Where the law requires a transfer mechanism, our providers rely on standard contractual clauses.

Traffic to MasterSet is encrypted in transit, and the database is encrypted at rest by our provider. We never hold your password because we never receive one. No service can promise perfect security, but we keep what we store to the minimum so that there is little to lose.

The date at the top of this page shows when it last changed. If we make a change that materially affects what we collect or what we do with it, we will say so in the app before it takes effect, and email signed-in users where the change affects them directly.

MasterSet is operated by Caleb Bertumen, which is the data controller for the information described here. Write to calebbertumen99@gmail.com about anything on this page.

See also the terms of service and the card images and IP notice.