Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect information such as:

• username
• email address
• password

Passwords are used for authentication and are stored using the project's existing password-hashing system. NIL Card Tracker does not store plaintext passwords.

Collection Information

When you use NIL Card Tracker, we store information you choose to associate with your account, including:

• card ownership
• card quantities
• tracked card sets
• collection goals
• grading information, when provided
• grade values, when provided
• card notes, when provided
• sharing preferences and shared-set links, when enabled

Checklist Requests

When you request or follow a missing checklist, we store your account association, request date, descriptive checklist information, and any notes or reference links you provide. Other signed-in collectors can search descriptive checklist information and interest counts, but cannot see your identity, private notes, or reference links through request search. Administrators can review requests and their private notes. We may send an administrator an email alert containing the request number.

We retain request status, review history, and links to completed checklists. Completion records may associate interested accounts with a fulfillment event. Requested Checklist Updates are a separate, optional notification category, off by default. Following a request does not change your notification consent. Delivery requires a compatible app, device permission, and enabled service rollout controls. Request notifications contain generic text and a fulfillment identifier, not private notes or requester lists.

Search and Usage Requests

Search terms and other requests are transmitted to our servers as necessary to provide application functionality.

Our servers may also process limited technical information associated with requests, such as IP address, user-agent information, timestamps, requested pages or API endpoints, and response or error information. This information may be used for security, troubleshooting, and service reliability.

Authentication Information

The iOS and iPadOS apps store authentication tokens securely using Apple's Keychain. The apps do not store your password locally after authentication.

Push Notification Information

If you choose to enable push notifications, NIL Card Tracker collects and processes information necessary to register your device and deliver notifications.

This may include:

• an app-installation or device registration identifier
• an Apple Push Notification service (APNs) device token
• the version of NIL Card Tracker installed on the device
• notification types explicitly supported by that app installation
• your device's notification authorization status
• your NIL Card Tracker notification preferences
• records of notification announcements associated with your account
• account-linked requested-checklist fulfillment delivery and attempt records
• technical delivery information, such as whether Apple accepted or rejected a notification request

Push notification information may be linked to your NIL Card Tracker account so notifications can be delivered to the devices on which you have enabled them.

NIL Card Tracker currently uses push notifications for features such as notifying users when new card checklists are available.

You may disable NIL Card Tracker notification categories within the app or change notification permissions through your device's iOS or iPadOS Settings.

You can also manage notification categories in website Settings. Withdrawing a checklist request or disabling its notification category cancels unsent requested-checklist deliveries. Diagnostic delivery records may remain until account deletion. Notifications already in transit cannot be recalled.

2. Information We Do Not Intentionally Collect Through the App

The current NIL Card Tracker application does not intentionally collect:

• precise location
• contacts
• photos
• microphone recordings
• health information
• advertising identifiers
• tracking data for advertising
• biometric information

The app does not include advertising SDKs, analytics SDKs, or third-party tracking SDKs at this time.

Device and app-installation identifiers used for push notification functionality are not used to track users across other companies' apps or websites.

3. How We Use Information

We use information collected through NIL Card Tracker to:

• create and authenticate accounts
• provide and maintain the NIL Card Tracker service
• display and manage your card collection
• track card quantities and collection goals
• provide card set and player search
• provide collection statistics
• provide sharing features you choose to enable
• deliver push notifications you choose to receive
• manage notification preferences and device registrations
• respond to support requests
• manage shared checklist requests and display their status and completed checklists
• protect the service from abuse or unauthorized access
• diagnose technical problems and maintain service reliability

We do not sell personal information.

We do not use personal information for third-party advertising.

We do not use device identifiers or push notification information for cross-app or cross-website tracking.

4. Sharing of Information

We do not sell your personal information to advertisers or data brokers.

Information may be disclosed to service providers that are necessary to operate the service, such as hosting, infrastructure, email, push notification delivery, or similar technical providers, only as needed to provide and maintain NIL Card Tracker.

Apple Push Notification Service

If you enable push notifications, NIL Card Tracker uses Apple Push Notification service (APNs) to deliver notifications to your iPhone or iPad.

Information necessary to deliver a notification, including an APNs device token and notification content, is transmitted to Apple.

Notification content may appear on your device's lock screen depending on your Apple notification settings. NIL Card Tracker notification messages are designed to contain public catalog information, such as the name of a newly available checklist, rather than private collection or account information.

Apple processes information used for push notification delivery according to Apple's own privacy policies and terms.

Collection Sharing

If you enable a public sharing feature, information specifically included in that shared page may be visible to people who have the share link.

If you enable the ownership-sharing preference, other collectors viewing their checklists may see your username next to cards you own. When the preference is disabled, they see only the number of collectors who own the card, not your username or other private account information.

We may also disclose information if required by law or when reasonably necessary to protect the security, rights, or integrity of NIL Card Tracker or its users.

5. Data Storage and Security

NIL Card Tracker uses reasonable technical measures to protect account and collection information.

The NIL Card Tracker website and applications communicate with NIL Card Tracker servers using HTTPS.

Authentication tokens used by the iOS and iPadOS applications are stored using Apple's Keychain.

Push notification provider credentials are maintained on NIL Card Tracker servers and are not included in the mobile application.

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

6. Data Retention

Account and collection information is retained while your account exists and as needed to provide NIL Card Tracker.

Push notification registrations may be updated, disabled, or removed when:

• you disable notifications
• you log out or change accounts
• a device registration becomes invalid
• you delete your account

Notification recipient and delivery records may be retained as reasonably necessary for service operation, troubleshooting, security, and delivery diagnostics.

Information may also be retained when reasonably necessary to comply with legal obligations, resolve disputes, prevent abuse, or enforce agreements where applicable.

7. Account and Data Deletion

You may permanently delete your NIL Card Tracker account directly from the iOS or iPadOS application.

In the app:

Profile → Delete Account

Account deletion permanently removes account-specific data maintained by NIL Card Tracker, including:

• account information
• card ownership
• quantities
• grading information and notes associated with your ownership records
• tracked sets
• collection goals
• user-submitted error reports associated with the account
• public shared-set links associated with the account
• notification preferences
• account-linked push notification device registrations
• account-linked notification recipient and pending delivery information
• checklist-request interests, private notes, reference links, submission records, and account-linked fulfillment recipients

Shared catalog information such as card sets, cards, players, brands, schools, and sports is not personal account data and is not removed when an account is deleted.

Shared checklist-request descriptions and administrative history may remain after withdrawal or account deletion so other collectors' requests are preserved. Account deletion removes your account attribution from retained request and review records. Withdrawing interest removes your private request notes, reference links, and fulfillment-recipient association, but does not delete a shared request. Submission identifiers, content fingerprints, and timestamps may remain until account deletion to prevent abuse and accidental duplicate submissions. Avoid placing personal information in checklist descriptions.

Notifications already accepted by Apple or already in transit may not be recalled after account deletion.

If applicable law requires certain information to be retained, it may be retained only as required by law.

For questions regarding deletion, contact support@nilcardtracker.com.

8. Children's Privacy

NIL Card Tracker is not specifically directed to children under 13.

We do not knowingly seek to collect personal information from children under 13.

If you believe a child has provided personal information inappropriately, contact support@nilcardtracker.com.

9. Third-Party Services and Links

NIL Card Tracker may use or contain links to third-party services necessary to operate or support the service.

These may include providers used for:

• hosting and infrastructure
• email delivery
• push notification delivery

For example, Apple Push Notification service is used to deliver mobile notifications, and Google services may be used to deliver account-related email.

We are not responsible for the privacy practices of third-party websites or services that are not controlled by NIL Card Tracker.

10. Notifications and Your Choices

Push notifications are optional.

When notification functionality is available, NIL Card Tracker may provide an in-app explanation before requesting notification permission from Apple.

You may:

• choose whether to enable notifications
• change supported notification preferences within NIL Card Tracker
• disable or modify notification permission through iOS or iPadOS Settings

Notification permission is specific to each device. For example, allowing notifications on an iPhone does not automatically grant permission on an iPad.

Your NIL Card Tracker account-level notification preference may apply across devices associated with your account.

11. Advertising and Tracking

NIL Card Tracker does not currently use third-party advertising networks or advertising tracking SDKs.

We do not use information collected for push notification delivery to track you across other companies' apps or websites.

We do not sell personal information to advertisers.

12. Changes to This Privacy Policy

We may update this Privacy Policy as NIL Card Tracker changes.

When the policy is updated, the effective date at the top of this page will be revised.

Material changes will be communicated appropriately when required.