PRIVACY POLICY
WHAT WE KNOW,
WHAT WE DON'T
EFFECTIVE 13 SEPTEMBER 2026
HoloHunt is built local-first. Your card archive lives on your device; nothing about it leaves your phone unless you sign in and sync, spend money, or ship a card. We do not run third-party advertising, we do not sell personal data, and we never see your card number.
What stays on your device
- Your archive: the cards you scan, their photos, conditions and notes are stored on-device. They sync to our servers only after you sign in.
- Camera: used only while the scanner is open, to photograph cards you own. Frames are processed for identification; the scanner never records video.
- Your shipping address: kept on your device between withdrawals so you don't retype it. It is sent to us only as part of an explicit withdrawal request.
What we collect, and why
- Account: if you use Sign in with Apple we receive a pseudonymous user identifier, and your email only if Apple relays one. Used to sync your archive, vault, credits and shipping history across devices. Sign-in is optional.
- Vault activity: pack opens, holds, releases, withdrawals and trades are recorded server-side. This is the product: a circulation record has to exist for your cards to circulate, and for the provably-fair receipts to be checkable.
- Payments: credit purchases are processed by Stripe in the browser. Stripe's handling of your payment details is governed by Stripe's privacy policy; we receive confirmation of the purchase, never your card number.
- Shipping: when you withdraw a card we use your name and address to fulfil the shipment, and share them with the carrier for that purpose only.
- Push notifications: optional. If you enable them we store a device token to deliver trade and shipment updates. Disable them anytime in iOS Settings.
- Diagnostics: standard Apple-provided crash reports, if you have sharing enabled with Apple, plus the first-party diagnostics described in the next section. We do not embed third-party analytics or ad SDKs.
Usage analytics & diagnostics
We run our own analytics, in the app and on this website, and nobody else's. They record what is used: which screens open, which actions are taken (a scan, a want, a trade offer, a pack opened, a card released or shipped), how far a page is scrolled, together with the app version, device model, OS version, language and time zone. In the app these events carry your account id, so we can see one collector’s journey as one journey; on this site they carry only a random id that lives in the tab and dies with it. No cookies, no fingerprinting, no advertising identifiers, and nothing is shared with or sold to anyone. We use it to find where the app confuses people and to keep the vault honest.
The app also sends us crash and performance diagnostics from Apple’s MetricKit: stack traces of a crash or hang, launch and scroll performance, and battery and network summaries. They contain no card, address or payment data.
Analytics and diagnostics are kept for 13 months, then deleted. Deleting your account (Profile → ACCOUNT → DELETE ACCOUNT) removes the events tied to it.
What other collectors see
A card's circulation timeline is anonymised at the source: other collectors see events like “pulled by a collector”, never a name, handle or identifier. Your trade counterparties see your handle and the reputation counts the trade floor shows.
Retention & deletion
Synced data is retained while your account is active. Delete your account from inside the app, Profile → ACCOUNT → DELETE ACCOUNT: and your account, archive, wants, open trade offers, push tokens and vault records are removed from our servers and the archive is erased from that device. Cards held in the vault or in the mail must be released or received first. If you cannot open the app, email support@holohunt.app with subject DELETE MY ACCOUNT. Records we are legally required to keep (for example, purchase, pack-open and shipping records) are retained for the required period and no longer, under the same pseudonymous identifier; shipping addresses on completed withdrawals are cleared.
Age
HoloHunt is intended for users 18 years or older. We do not knowingly collect data from anyone under 18.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data. Email support@holohunt.app and we will honour them. We do not sell or share personal data for cross-context behavioural advertising, so there is nothing to opt out of.
Changes
If this policy changes materially we will update this page and note the new effective date at the top. Questions: support@holohunt.app.