Privacy Policy

This privacy policy applies to the MetaVault app for mobile devices and web browsers, together with any related services operated by Christopher Osuna (collectively, the "Application"). Christopher Osuna is hereby referred to as the "Service Provider".


Information Collection and Use

The Application collects information when you create an account and use it. This information may include:

On the web, the Application uses Google Analytics 4 to measure page views and sign-ups in aggregate so the Service Provider can see which features are used. Before a page address is sent, share-link tokens and account or deck identifiers are masked, IP addresses are anonymized, and the Application honors your browser’s Do Not Track setting. No analytics run in the iOS app, and analytics data is never used to sell or share your information.


Camera and Card Scanning

The Application can use your device's camera to scan physical Magic: The Gathering cards. Camera images are processed entirely on your device to recognize card names; they are never uploaded, transmitted, or stored by the Service Provider. Camera access is optional and is only requested when you use the scanning feature. The Application does not access your photo library.


Cookies and Similar Technologies

The Application does not use advertising cookies. On the web it may set Google Analytics cookies for the aggregate measurement described above; the iOS app sets none. It stores essential data on your device (such as authentication tokens and local preferences) solely to keep you signed in and to make the Application function. Where required by applicable law, the Service Provider will obtain consent before using any non-essential tracking technologies.


Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at crosuna99@gmail.com.


Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell or share personal information as defined by the CCPA/CPRA. To exercise your CCPA/CPRA rights, contact the Service Provider at crosuna99@gmail.com.

The Service Provider may use the information you provide to send important information and required notices about the Application.


For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information. The information the Service Provider requests will be retained and used as described in this privacy policy.


Third Party Access

Your personal data is stored and processed by the service providers described below so the Application can function; it is not sold, and it is not shared with third parties for advertising or analytics. The Service Provider may share your information with third parties only in the ways that are described in this privacy statement.


Third-Party Services

The Application integrates with the following third-party services. These services may receive limited information necessary to provide their functionality, and their own privacy policies govern how they handle that data:


Public Sharing

The Application lets you create optional public share links for a collection, deck, or group. When you turn sharing on, anyone who has the link can view the shared cards, including estimated market prices, without signing in. Sold-card history is never shared. Sharing is off by default, and you can revoke a link at any time by setting the collection, deck, or group back to private in the Application.


Local Stores

The Local Stores feature shows game stores near a location you choose and, for supported stores, whether a card is in stock. If you share your device location, the Application reads it once and keeps the coordinates only in your browser or on your device; the Service Provider does not store your location. If you type a ZIP code, it is sent to Zippopotam.us to obtain coordinates (see Third-Party Services). Stock lookups are made by the Service Provider’s server using the card name and the store’s public website or seller identifier, with results cached briefly; your identity and location are never included. When you follow a link to a store, the Application records an anonymous count for that store (no account identifier, no location, and no card name) so the Service Provider can understand which stores are useful. Stores submitted by users are reviewed before they are published.


International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.


The Service Provider may disclose User Provided and Automatically Collected Information:


Account Deletion and Opt-Out Rights

You can delete your account and all associated data at any time directly in the app under Settings > Delete Account. Deletion is immediate and permanent: it removes your collection, decks, groups, profile, and account credentials from the Service Provider's systems, and revokes your Sign in with Apple authorization where applicable.

You can stop further collection of information from your mobile device or computer by uninstalling the Application. Uninstalling stops the Application from collecting data from your device, but it does not delete your account; use the in-app deletion described above, or contact the Service Provider, to remove data that has already been stored.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, you can also contact the Service Provider at crosuna99@gmail.com.


Data Retention Policy

The Service Provider retains personal data based on its necessity for the stated purposes:

If you cannot use the in-app deletion flow, you may request deletion of your personal data by contacting the Service Provider at crosuna99@gmail.com, subject to any legal obligation to retain it. Please note that some User Provided Data may be required for the Application to function properly.


Children

The Application is not intended for children under 13 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.


The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourages parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (crosuna99@gmail.com) so that they will be able to take the necessary actions. If you are under 13 years of age, your parent or guardian must provide consent on your behalf where permitted by law.


Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.


Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.


Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.


Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at crosuna99@gmail.com.


This privacy policy is effective as of 2026-09-03


Your Consent

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.


Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at crosuna99@gmail.com.


This privacy policy page was generated by App Privacy Policy Generator