Privacy Policy

1. Introduction

AlteredVault ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1. Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Email address, username, password (hashed), and display name
• Profile Information: Any additional information you choose to add to your profile
• Content: Images, descriptions, and metadata of cards you upload
• Communications: Messages sent through our messaging system are encrypted end-to-end using client-side encryption. The encrypted messages are stored in our database, but we cannot read the message content as the decryption keys are stored only on your device. Contact form submissions are stored in plain text for customer support purposes.

2.2. Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Pages visited, time spent, and interactions with the Service
• Device Information: Browser type, operating system, and device identifiers
• IP Address: Your IP address may be logged by our hosting provider (Supabase) and our application framework (Next.js) for security, analytics, and technical purposes. We do not store IP addresses in our application database or use them for user identification or tracking beyond what is necessary for service operation and security.
• Cookies and Similar Technologies: To maintain your session and improve your experience

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process, display, and store digital copies of your uploaded content
• Enable communication between users
• Send you service-related notifications (e.g., account verification, password resets)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations
• Analyze usage patterns to improve user experience
• Use your uploaded content (card images, descriptions, and metadata) for marketing, advertising, and promotional purposes, including but not limited to featuring cards in advertisements, social media campaigns, promotional materials, and partner collaborations
• Retain digital copies of your content in our systems, including backups and archives, for service continuity and legal compliance purposes

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Public Profile Information: Your username, display name, and uploaded content are publicly visible on your collection page
• Service Providers: We may share information with third-party service providers who perform services on our behalf (e.g., hosting, email delivery, analytics)
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
• With Your Consent: We may share information for any other purpose with your explicit consent

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your information:

• Data is encrypted in transit using HTTPS
• Passwords are hashed and never stored in plain text
• We use secure authentication systems (Supabase Auth)
• Access to personal data is restricted to authorized personnel only
• Digital copies of your uploaded content are stored securely on our servers and backup systems

Content Retention: We retain digital copies of your uploaded content (card images, descriptions, and metadata) in our systems, including active storage, backups, and archives. This retention is necessary for service continuity, data recovery, legal compliance, and to enable features such as content restoration. Even if you delete your account or remove content from public view, we may retain copies in our backup and archive systems for a reasonable period. We will make reasonable efforts to remove your content from active systems upon your request, but archived or backup copies may persist.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can access and update your account information through your profile settings
• Deletion: You can request deletion of your account and associated data by contacting us
• Correction: You can update your profile information at any time
• Data Portability: You can request a copy of your data in a portable format
• Opt-Out: You can opt out of non-essential communications

To exercise these rights, please contact us at info@alteredvault.com.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how you use the Service. You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at info@alteredvault.com.