Privacy Policy
Last modified: June 9, 2026
This Privacy Policy governs Vault TCG and related services offered by IG Studios ("we," "us," or "our"). It describes how we collect, use, store, and share your personal information when you ("you," "your," or "user") do any of the following:
- Access or use our website at www.vaulttcg.app ("Website") or other digital properties we own and operate, including our software application Vault TCG (the "App"). Together, the Website and App are the "Services."
- Communicate with us through contact options we provide (for example, email addresses listed in this Policy or the App).
Personal information (or personal data) means information about an identifiable individual, or any similar term defined in privacy or data protection laws that apply where you live.
This Policy does not apply to products, services, websites, or content offered or hosted by third parties. Those are governed by their own privacy policies.
Please read this Privacy Policy carefully. It explains how we collect, process, and store your information. If you do not agree with our practices, do not download, register for, or use the Services.
By downloading, registering for, or using the Services, you indicate that you understand, accept, and consent to the practices described here.
We may update this Privacy Policy from time to time. Your continued use of the Services after we post changes means you accept the updated Policy, unless applicable law requires a different process. Please review this page periodically.
We will notify you in advance of material changes where required, and obtain consent if the law requires it for new ways we collect, use, or disclose your personal information.
Vault TCG helps you catalog and manage trading card collections, scan and identify cards, view market and pricing information, and access optional subscription features.
For questions, contact us at privacy@vaulttcg.app. Use of the Services is also subject to our Terms of Service.
1. Questions and opt-out
For questions or comments about this Privacy Policy, email privacy@vaulttcg.app.
We do not sell your personal information. We do not disclose personal information to third parties for their own direct marketing purposes without your consent.
If you receive optional product updates, waitlist messages, promotional emails, or similar marketing communications from us and wish to opt out, use the unsubscribe option included in the message where available or contact privacy@vaulttcg.app. We may still send transactional or service-related messages, such as account, security, billing, support, or policy notices.
2. Updating your information
The Services include tools to correct, update, or manage your account where supported—for example, in the App or account settings.
For help, contact support@vaulttcg.app.
3. Information we collect
Information you provide
When you register or use the Services, we may collect:
- Account details: name or display name, username, and email address
- Authentication: credentials or tokens when you use Sign in with Apple, Google Sign-In, or email and password
- Your content: collection names, binder or portfolio data, notes, graded-card details, and related card metadata
- Images: photos you upload or capture for scanning or identification (we may process them on our servers to provide those features)
- Files you import: for example, CSV or other files you choose to upload for collection import, processed to carry out that feature
- Referral and promotional codes you enter (for example, to apply a subscription discount), associated with your account as needed to honor the offer
- Account security: if you use optional features such as recovery codes or password reset, related data needed to operate those features
- Waitlist and product updates: your email address and related signup information if you join a waitlist, request an invitation, or opt in to product or marketing updates
- Communications: messages you send us, such as support requests by email
- Purchases: subscription-related information. Payment card details are handled by Apple, Google Play, or Stripe (as applicable); we typically receive status, plan identifiers, and transaction references—not your full card number
Information collected automatically
We automatically collect certain information to operate and improve the Services, such as:
- Device and software: device type, operating system, app version, language, and similar diagnostics
- Technical identifiers: IP address, device or installation identifiers, and similar data sent when your device contacts our servers or sign-in partners
- Usage and diagnostics: features used, session information, and server logs (for example, failed requests may produce error lines in infrastructure logs). The App does not send crash reports to us through a third-party crash-reporting SDK. We use PostHog (PostHog, Inc.) for first-party product analytics in the App—for example, to understand navigation and feature usage and to improve the Services. Analytics events may include account identifiers such as your user ID, email address, and username, along with screen views, feature usage, app environment, device, and technical data. PostHog may process this information as our service provider under their documentation and terms. We do not use PostHog or third-party advertising SDKs in the App for cross-app tracking or third-party advertising; if our practices change materially, we will update this Policy
Location: We do not continuously collect your precise GPS location as a core feature of Vault TCG. If we add a feature that needs location, we will request permission where required and update this Policy.
Push notifications (mobile App)
If you use our mobile App on a supported device and choose to allow notifications in your operating system settings, we may collect and store a device push token (an identifier used only to deliver notifications to that installation). We associate the token with your account so we can send you optional notifications related to the Services—for example, account or service updates we offer through the App.
Delivery is handled through Expo's push notification infrastructure, which communicates with Apple (APNs) or Google (FCM) to reach your device. Expo processes notification content only to deliver messages and as described in Expo's documentation; we do not use push notifications or push tokens for cross-app advertising or "tracking" as defined in Apple's App Tracking Transparency rules.
You can turn off notifications at any time in your device settings for Vault TCG. Signing out of the App removes the stored push token from our servers for that session as part of our normal logout process. Deleting your account removes associated tokens where our systems are designed to do so.
4. Cookies, local storage, and Do Not Track
The App stores session tokens and similar data on your device (for example, using OS secure storage) to keep you signed in. The Website may use cookies or similar technologies when you visit pages we host (for example, to remember preferences or support basic functionality).
Where available, you may accept or reject non-essential Website cookies, including optional analytics or personalization cookies. Rejecting non-essential cookies does not prevent us from using cookies or local storage that are necessary to provide security, authentication, or core functionality.
Sign-in or checkout flows may open your device's browser (or in-app browser) to providers such as Google, Apple, or Stripe; those providers may set their own cookies under their policies.
You may be able to control cookies through your browser. Disabling cookies may limit some Website features.
The Services do not respond to all "Do Not Track" browser signals. Learn more at eff.org/issues/do-not-track.
5. How we use information
We use information to:
- Provide the Services: operate, maintain, and improve features
- Accounts: create, secure, and authenticate your account
- Subscriptions: process entitlements through app stores or payment partners
- Support: respond to questions and requests
- Notices: send service-related messages (for example, security or policy updates), including optional push notifications if you enable them on your device
- Optional communications: send waitlist invitations, product updates, promotional messages, or similar marketing communications where permitted, with opt-out controls where required
- Safety and integrity: detect, prevent, and address fraud, abuse, or technical issues
- Legal: comply with law and enforce our Terms of Service
- Reliability: use logs and aggregate or de-identified metrics we generate to monitor performance, debug issues, and improve security
6. How we share your information
We do not sell your personal information. We disclose it only as described in this Policy or with your consent.
Service providers. We may share information with vendors that host our infrastructure, process payments, assist with security or fraud prevention, deliver mobile push notifications (for example, Expo's push delivery service working with Apple or Google's notification systems), provide product analytics (for example, PostHog), or provide other services we need to run the Services. They may use the information only to perform services for us and must protect it appropriately.
App stores and sign-in partners. Sign in with Apple, Google Sign-In, and purchases through Apple or Google are processed under their privacy policies and terms.
Payment processing. Checkout may be handled by Apple, Google Play, Stripe, or similar processors. We receive limited information needed to confirm subscription status.
Aggregate or de-identified data. We may share statistics that do not identify you—for example, to describe how the Services are used.
7. Other disclosures
We may access, preserve, or disclose information if we believe in good faith that it is necessary to:
- Comply with law, legal process, or governmental requests
- Protect rights and safety of IG Studios, users, or others
- Investigate fraud, security issues, or abuse
- Corporate transactions: support a merger, acquisition, financing, or sale of assets (your information may transfer subject to standard protections)
8. Links to other sites
The Services may link to third-party websites or services (for example, marketplaces). We are not responsible for their privacy practices—please read their policies before you provide information.
9. Social media
If you interact with our official pages or accounts on third-party social networks, those platforms' privacy policies and terms apply in addition to this Policy. We do not control how those platforms collect or use your information.
10. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information.
No method of transmission or storage is 100% secure. You use the Services at your own risk.
11. Children's privacy
The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13.
If you believe we have collected information from a child under 13, contact privacy@vaulttcg.app. We will take steps to delete it.
12. International users and data location
We are based in the United States and may process and store information in the U.S. or other countries where we or our providers operate.
Those locations may have different data protection rules than your country. By using the Services, you understand that your information may be transferred to the U.S. and elsewhere.
13. California and other U.S. state privacy rights
Depending on where you live, you may have rights to access, delete, or correct certain personal information, or to opt out of certain processing (such as "sale" or "sharing" under state law).
We do not sell personal information in the usual sense of that term. To exercise rights, email privacy@vaulttcg.app. We may need to verify your identity before responding.
California residents may request additional details about personal information collected, used, and disclosed over the prior 12 months, subject to legal exceptions.
| Category (illustrative) | Examples / sources | Purposes (summary) |
|---|---|---|
| Identifiers | Name, username, email, IP address, device identifiers, mobile push tokens (when you allow notifications), account ID—from you and your device. | Accounts, authentication, security, support, service improvement, legal compliance. |
| Commercial information | Subscription, referral or promotion records, and purchase-related data—from you and payment or app-store partners. | Fulfill purchases, manage entitlements, support, fraud prevention. |
| Internet or similar activity | App or web usage, logs, interactions—from you and automated collection. | Operate and improve the Services, security, diagnostics. |
| User-generated content | Collections, scans, images you submit—from you. | Scanning, cataloging, and related features you request. |
14. European Economic Area, UK, and Switzerland
If you are in the EEA, UK, or Switzerland, we process personal data as described here and under applicable law. We may rely on bases such as contract, legitimate interests, consent, or legal obligation.
You may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. You may lodge a complaint with a supervisory authority.
To exercise these rights, contact privacy@vaulttcg.app. We will respond within timeframes required by law where applicable.
15. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version and update the Last modified date.
For material changes, we may provide extra notice (for example, in the App or by email). Continued use after changes means you accept the updated Policy, unless applicable law requires otherwise.