PRIVACY POLICY

// OVERVIEW

AlerTCG (“the App”) is developed and published by SHYGUY LLC (“we”, “us”), for iPhone and for Android. This policy covers both; where they differ, it says so.

The short version: everything you track stays on your phone. What you type is sent to be looked up and is not kept. The only thing stored on our side is a card list you choose to pair, and only if you choose to.

// WHAT STAYS ON YOUR PHONE

Everything you track — cards, slabs and wallet addresses — your alert settings and history, and your profile, including the photograph you add to it. None of it is sent anywhere unless you take the one step described below. There is no account, no login and nothing to sign up for, so there is no record of you on our side to begin with.

// WHAT IS SENT TO BE LOOKED UP

When you type a card name, a cert number or a wallet address, the App sends that text to our server, which fetches the answer from the price sources, the grading index and the two chains, and returns it. Nothing about that request is kept beyond ordinary short-lived server logs, and nothing in it identifies you: a wallet address is public information on a public chain, a cert number is printed on a slab, and a card name is a card name.

The App checks your tracked items in the background when iOS or Android allows, which sends the same lookups again.

// THE ONE THING THAT LEAVES YOUR PHONE BY YOUR CHOICE

If you type a pairing code from the retcg.xyz website into the App, your tracked cards — and only cards, not slabs or wallets — are stored on our server so they can follow you between devices. That is the same list the website holds, under the same rules, and it is described in the website's own privacy policy. The website created that list when you confirmed your email address there, so the synced cards are linked to that address, and the App sends the list's identifier (a random id our server assigned) with each sync. The App itself never asks for or sends your email address.

This is opt-in: you start it, and you can undo it from the Vault tab. Unlinking stops the syncing and leaves the cards on your phone.

// ALERTS

Notifications are composed on your phone by the App and shown by iOS or Android. There is no push service, no device token and no server that knows you have alerts on. Turning them off is done in the phone's settings or in the App, and nothing on our side changes, because nothing on our side knew.

// YOUR PROFILE AND THE IMAGE YOU SHARE

iPhone only — the Android app has no profile. Your profile lives on your phone. When you share it, the App renders an image on the phone and hands it to the iOS share sheet; wherever you send it from there is between you and that app. The image can carry the handles and links you typed and your own photograph of your card. We never see it.

// WHAT IS NEVER COLLECTED

• No analytics
• No advertising identifiers
• No tracking across apps or websites
• No contacts
• No location
• No crash reporting beyond what Apple or Google collects under its own policy and your own settings

On iPhone the camera is used only to photograph your card for your profile, only when you ask, and the photo stays on the phone. The Android app does not use the camera. On Android the App asks for internet access and permission to show notifications, and keeps its scheduled check across a restart; its data lives in the app's private storage with Android's cloud backup turned off, and a pairing session is stored encrypted with a key held in the Android Keystore.

// THIRD PARTIES

Prices come from Scryfall and pokemontcg.io; chain data comes from Alchemy and Helius; the grading index is ours. The App never talks to those services directly — every request goes through our server, so none of them see your device. Apple and Google provide the notification and share machinery under their own terms.

// CHILDREN

The App is rated for everyone and collects nothing, so there is nothing to say about children beyond that.

// YOUR RIGHTS

Because nothing about you is stored unless you pair with the website, the way to delete your data is to delete the App. If you paired, the website's privacy policy explains deletion, which is immediate and permanent from a link at the bottom of any digest or from the dashboard.

// CHANGES TO THIS POLICY

We may update this policy if the App's functionality changes. The effective date above reflects the latest revision.

// CONTACT

Questions about this policy? Contact SHYGUY LLC at hello@shyguy.studio