Your data, plain and simple

Packsniper collects only what's necessary to run the service. We don't sell your data, run ads, or share your information with third parties beyond what's needed to operate.

What we collect

• Account info — email address and username, used to identify your account. Authentication is handled by Supabase Auth.
• Profile info — optional: favorite team, favorite sport. Stored in our database, visible only to you unless you enable a public profile.
• Watchlist and portfolio — cards you star or add to your collection. Stored per-user, protected by row-level security. Only you can read or modify your own records.
• Submitted pulls — if you submit a card pull, the image and details you provide are stored and may be displayed publicly after review.

What we don't collect

• Payment information — we have no paid features
• Browsing behavior or analytics beyond server logs
• Device fingerprints or cross-site tracking

Data storage

All user data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure. Passwords are never stored in plaintext — authentication is managed entirely by Supabase Auth using bcrypt hashing.

Deleting your account

To request deletion of your account and associated data, contact us via the account page. We'll remove your auth record and all personally linked data (watchlist, portfolio, submissions) within 30 days.

This policy may be updated as the service evolves. Significant changes will be noted on this page.