Privacy Policy
Nuclear Pharmhouse Card Vault (“Card Vault”, “the app”) is a trading card collection tracker published by Nuclear Pharmhouse. This policy explains what information the app collects, how it’s used, and how you can delete it. It applies to the Android app and the website at card-vault-project.web.app, which are the same service.
Information we collect
- Account information: your email address and a unique account ID. If you sign in with Google, we also receive the name and email address on your Google account.
- Your collection: the cards you mark as owned, quantities, estimated values and value history, notes, wish list, cards you add yourself, and your app settings.
- Trading (optional): only if you turn trading on. You choose a display name and a contact method (an email address or Discord username). Your display name, contact details, and the lists of cards you have extra copies of or want are visible to other signed-in collectors who use trading. When you send or accept a trade request, the two people involved can see each other’s display name, contact details, the cards being traded, and any note.
- Messages you send us: if you report an issue with a card or a collector, or request a card or set, we receive your message, your account ID and your email address.
The app doesn’t collect your location, contacts, photos, or device identifiers, and it doesn’t use advertising or analytics tracking.
How we use it
- To sign you in and keep your collection saved and synced across your devices.
- To show trade matches between collectors who have turned trading on.
- To review issue reports and card requests, and to keep the card catalog accurate.
We don’t sell your information, share it for advertising, or use it for anything other than running the app.
Service providers
Card Vault runs on Google Firebase (Firebase Authentication, Cloud Firestore and Firebase Hosting), which stores and processes the information above on our behalf. Fonts are loaded from Google Fonts, which receives your device’s IP address when the app loads. Links to eBay sold listings open eBay’s website, which has its own privacy policy.
Security
All information is sent over encrypted HTTPS connections and stored by Firebase, which encrypts data at rest. Security rules limit your collection data to your own account: other users can’t read it. The only information other users can see is the trading information described above, and only if you turn trading on.
Keeping and deleting your information
We keep your information until you delete your account. You can delete your account and its data at any time:
- In the app or on the website: open ⚙️ Settings, then tap Delete my account.
- Without the app: follow the steps on the account deletion page.
Deleting your account removes your account, your collection, cards you added, your settings, and your trade listing. Unfinished trade requests are called off and removed. Finished trades stay in the other trader’s history with your name, contact details and note removed. Issue reports and card requests you sent are kept so the catalog can be corrected. Email us and we’ll delete them within 30 days.
Children
Card Vault isn’t directed to children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we’ll delete it.
Changes to this policy
If this policy changes, we’ll update it on this page and change the effective date above.
Contact
Questions or requests about your information: nuclearpharmhousecardvault@gmail.com