Privacy

Information we collect

• Account information, including your email address, username, and password hash.
• Account preferences, including your selected colour theme.
• Profile details, card sets, images, comments, collections, trades, and reports.
• Technical information such as request logs, IP addresses, device details, and errors.
• Records needed for email verification, password resets, security, and moderation.
• Purchase records, including what you bought, when, the price, the country it was bought from, and the payment provider’s order reference.
• Lounge posts, replies and likes, and the collectors you have blocked.

Google sign-in

Google sign-in is optional. If you use it, Google sends us a signed identity credential, including your account identifier, email address and verification status. We keep the identifier to connect Google to your Miscellary account. We do not request access to your Gmail, contacts, Drive files or other Google content, and we do not copy your Google name or photo into your profile.

The website loads Google’s sign-in service on login and sign-up screens and when you choose to connect or confirm Google in account settings. Google processes those interactions under its privacy policy. A short-lived website cookie helps secure the sign-in attempt. You can disconnect Google in account settings after setting a password; closing your account removes the connection.

Payments

Website payments are handled by Stripe and Android payments by Google Play. They collect your payment details directly; Miscellary never receives your full card number. They send us confirmation of each purchase, the billing country, and later any refund or chargeback, so we can add or take back what you bought. In the Android app we give Google Play a coded account reference, not your email or username, so purchases are tied to the right account. Stripe and Google process payments under their own privacy policies.

To decide whether purchases are offered, the website checks the country your connection comes from. That check isn’t stored.

How we use information

We use this information to provide accounts and collections, process uploads and trades, deliver service email, prevent abuse, respond to reports, troubleshoot errors, and improve the reliability of Miscellary. We do not sell personal information.

What is public

Usernames, display names, biographies, avatars, published sets and cards, public binders, follows, likes, comments, Lounge posts and replies, and the supporter badge (if you choose to show it) may be visible to anyone. Who you have blocked is private. Email addresses, password details, account preferences, draft sets, and report details are not public through the product.

Cookies and analytics

The website uses a secure cookie to keep you signed in, and the Android app stores your sign-in in the device’s secure storage. These are needed for your account to work. The website also remembers your colour theme in browser storage to apply it when loading; the preference is saved to your account and cleared from the browser when you log out.

We use TraceTray to understand how people use the website. It records things like cursor movement, clicks, scrolling, and which pages are visited. The server creates a daily visitor identifier from a rotating random value, the website key, IP address and browser details. The raw IP address is not stored in the analytics data, and identifiers cannot link visits across days. The tracker does not store a visitor ID in your browser. It does not record what you type, form entries, passwords or payment details, and it is not used for advertising. The packaged Android app does not include this website tracker. See TraceTray’s privacy policy for details.

Service providers

Miscellary uses service providers to host the website, API, database, uploaded media, logs, and transactional email. Reports, feedback, payment events and error details are also sent to a private Discord channel that Miscellary's operator and authorized moderators can read. Those providers process information only to supply their services to Miscellary and may operate in countries other than your own.

Storage and retention

Information is retained while an account is active and as reasonably needed for security, backups, moderation, legal obligations, and service operation. Purchase records are kept for as long as tax and accounting law requires, including after an account is closed. Published-set deletion may leave archived cards in collectors’ inventories as described by the product. You can delete your account at any time from your account settings on the website or in the app. You can also ask about access, correction, or deletion of your personal information by contacting us.

Deleting your account

On the website, open Account, choose the Account tab and select Close account. In the Android app, open Settings and select Close account. You can also email privacy@miscellary.com from the address on your account and we will close it for you. Closing an account removes your email, password, collection, trades, follows, likes, blocks and unused tickets, and cancels any membership. Published sets stay for the collectors who own their cards, and your comments and posts stay under a deleted-user label. Purchase records are kept as described above.

Private uploads, drafts and account-linked feedback are removed. Matching support and billing messages posted by Miscellary's Discord bot are also removed. Provider and upload cleanup runs in the background and retries after failures. Limited cleanup identifiers are retained while requests are pending and for up to 30 days after completion; backup copies expire under the backup retention policy. Published artwork and text remain under the deleted-user label as described above. Contact us if retained content contains personal information you want removed.

Security and children

We use reasonable technical safeguards, but no online service can guarantee absolute security. Miscellary is not directed to children under 13. Contact us if you believe a child under 13 has provided personal information.

Contact

Privacy questions and requests can be sent to privacy@miscellary.com.