Privacy
Plain words about what I keep and why. This page is all of it — there is no longer version.
Who's responsible
One person runs Lootquidity and is accountable for everything on this page. Anything about your data: support@lootquidity.com.
What I keep
When you sign in, your provider (Google or Discord) shares an email address and an account identifier; I keep both, plus the handle you choose at the gate. After that, everything I store is what you create by using the app: your collection and binders, your scans, the products you follow, your alert settings, your notifications, and any bug reports you send.
Why I keep it
To sign you in, to show you your own collection, to send the alerts you asked for, and to fix what breaks. Nothing is collected for any other reason, and nothing is collected that those four don't need.
Alerts are your choice
Nothing is sent unless you asked for it: an alert exists because you followed a product or set a price line, and it reaches your email only while Notify me is on for your account. Turn it off in Settings → Notifications, or from the link at the bottom of any alert email — one click, no sign-in. Every alert is a plain notice of a price or a restock with a plain link. There is no promotion in them.
What I don't do
No ads. No selling or sharing your personal data — with anyone, for anything. No tracking beyond what the app itself needs to work: no third-party analytics, no trackers, and the only cookie is the session that keeps you signed in.
Who else sees anything
Google or Discord handle sign-in and learn only that you signed in. Card data and images come from Scryfall and TCGplayer; when a picture loads, your browser fetches it from their servers, as with any image on the web. Alert emails go out through Resend, a mail provider in the United States, which handles the address and the message text and nothing else. Nobody else gets anything.
Retailer links
Restock alerts and price listings link out to card retailers. Those outbound links may be affiliate links — a retailer may pay a referral fee for the visit. That never changes what you see here or what you pay there.
How long I keep it
For as long as your account exists. Alert delivery records — what was sent where, and when you turned email off — are the record that you asked for them; they go when the account goes.
Keeping it right
Your collection is yours to edit or delete, line by line, any time. Your email address is whatever your sign-in provider gave me the first time you signed in; if it changes, tell me at support@lootquidity.com and I'll update it.
Keeping it safe
Everything travels over HTTPS. There are no passwords here to leak: sign-in is by Google or Discord, and I never see one. Backups are encrypted.
Getting your data out
Settings → Data → Import and export gives you your whole collection as a file, any time. Anything else I hold about you: email support@lootquidity.com and you'll get it.
Deleting your account
Settings → Delete account, inside the app. Deletion is immediate and complete: your account, collection, scans, and notifications are removed in one transaction. Your founder number is retired forever — nobody inherits it.
What survives, and why
Two things outlive an account, anonymized: retailer clicks and bug reports. The link to you is removed from both — the click counts still show retailers that real traffic comes from here, and a reported bug can still get fixed. Neither can be traced back to you.
Where your data lives
On servers in Canada. Alert emails pass through the United States on their way to you (see above).
If something's wrong
Tell me at support@lootquidity.com and I'll fix it or explain it. If that doesn't settle it, the Office of the Privacy Commissioner of Canada takes complaints about how personal information is handled.
Contact
Questions, bug reports, or requests about your account: support@lootquidity.com. One person answers, usually within a few days.