1 The Short Version
MasterSets is built to track cards, not people.
- We don't sell, rent or share your data. Ever.
- No ads, no tracking cookies, no profiles of you.
- Nobody needs to give a name, e-mail, birthday or photo.
- Our server keeps IP addresses for 7 days to stop abuse, then erases them.
- We may earn from the shop and buy links, never from your data.
- Delete your account any time; it's gone for good after 30 days.
The rest of this page gives the details. MasterSets ("we", "us") runs mastersets.com (the "Site").
2 What We Keep
- Your account — a username or nickname, and your sign-in secret (password, pictures or cards), stored scrambled so nobody can read it, not even us.
- Your e-mail address — only if you sign up with e-mail, Google or Discord. We use it to sign you in, confirm it's yours and reset your password. No newsletters unless you ask for them.
- Google or Discord sign-in — they send us your e-mail address and profile name. The name becomes your display name, which you can change on your account page. We never see your Google or Discord password.
- Your collection — the cards you own, your wish lists, binders and progress. It's yours, and you can delete it any time.
- What you send us — feedback, card pictures, and store suggestions or reports on the store map.
Without an account, your collection is saved in your browser and doesn't reach our server unless you create an account. Clearing your browser data erases it, and we can't bring it back.
Everything travels encrypted (HTTPS). No system is perfectly secure, so we keep as little as we can: what we don't have can't leak.
3 IP Addresses
Every website sees the IP address of the device visiting it. We use it only to keep MasterSets running and to stop spam, bots and break-in attempts.
- After 7 days we erase it everywhere we store it: sign-ins, sign-ups, buy-link clicks, scanner devices and the store map.
- Visitor counts and votes use a one-way code made from the address. The code can't be turned back into the address.
- If an address is banned for abuse, we keep it until the ban ends.
5 Outside Services
We use as few as we can, and none of them gets your data from us for ads.
- Cloudflare protects the Site from attacks and delivers its pages, so it handles every visit. It also counts visits for us (pages viewed, where visitors came from) without cookies and without fingerprinting anyone.
- Our hosting company runs the server where your data lives.
- Google and Discord — only if you choose to sign in with them.
- TCGplayer and eBay — when you click a buy link, you leave MasterSets and their privacy policies apply. They never send us your payment details or who you are, only their commission reports.
- OpenStreetMap draws the store map.
- Fonts and code libraries — some pages load free fonts and code from Google Fonts, jsDelivr, cdnjs and unpkg. Like any web request, these see your IP address. We're moving them onto our own server.
We only hand over information when the law requires it. If MasterSets ever changes hands, we'll tell you before your data falls under a different policy.
6 Collectors of Every Age
Collectors of every age are welcome. Kid accounts sign in with a nickname and pictures: no e-mail, no birthday, nothing personal. A parent can link a kid's account, choose what it shows, or delete it.
Like every account, kid accounts use a login cookie and an account number only to run the Site: keep you signed in, save your collection and stop abuse. Never for ads or profiles.
If you think a child has shared something personal with us, tell us and we'll delete it.
7 Your Choices
- See and change your details on your account page.
- Get a copy of your collection or anything we hold about you: just ask.
- Delete your account any time from your account page. You get 30 days to change your mind; after that your account and collection are erased for good, except anything the law makes us keep.
- E-mails — we only send sign-in e-mails, like confirming your address or resetting your password, unless you ask for more.
Depending on where you live, the law may give you more privacy rights. Ask, and we'll honour them.
8 Changes
If we change this policy, we'll update the date at the top. For big changes, we'll also post a notice on the Site. If you keep using MasterSets after a change, the new version applies.
9 Contact Us
Questions or requests? Reach us through our contact page or at the address below.