Privacy Policy

1. Controller

Pixeesoft Sàrl, Rue Fendt 1, c/o Impact Hub Geneva-Lausanne SA, 1201 Genève, Switzerland — compliance@pixeesoft.dev.

2. What we process

• Account data — name, email address, and avatar as provided by the Google or GitHub sign-in you choose, and where your account came from: the Plus code you typed, the page of ours whose link you followed, or the assistant that sent you to sign in.
• Collection data — the cards, decks, locations, prices, and notes you store. This is the product; we process it solely to provide it back to you and the agents you authorize.
• Agent authorizations — OAuth clients and scopes you approve, so you can review and revoke them, and a record of each one you end, so that it stays ended.
• Plan and payment — your plan, who set it and until when, and, if you buy Plus, Stripe's customer and subscription references, the subscription's status and whether it is monthly or yearly. Your card details go to Stripe and never reach us.
• Correspondence — your address and what you write, if you email us.
• Usage counts — for each day, how many calls your assistant made to Reliquary, how many rows you imported, and how many times you or it sleeved, moved, claimed or looked up a card, counted per account and kept with it, so we can stop runaway software and learn whether people use Reliquary for where their cards are.
• Technical logs — short-lived request logs (IP address, user agent, errors) produced by our hosting provider Cloudflare, used for security and debugging. Your IP address is also counted for a minute when an account is made from it, so that sign-up cannot be automated.
• Usage analytics — product events via Mixpanel: pages viewed, free tools run, features used such as imports or deck edits, and browser and device type. By default they are anonymous, on our legitimate interest in knowing which pages and tools are used: nothing is kept on your device, an address in the app goes without the ids that would name a deck or a list, and nothing ties the events to you; a visit gets a random identifier that lasts until you reload the page, and a yes later starts a new one. Your browser sends these events to reliquary.gg, which passes them on to Mixpanel without your IP address and adds only the country you are in. Each call your assistant makes to Reliquary, each assistant you connect, and each view of a published list or a handle page, is counted the same way, with no identifier at all: the tool or the kind of page, whether it worked, the assistant's name and the site it signs in from, and the country; never who made it, what was asked or which list it was. Only if you say yes when Reliquary first asks, and you can change your answer on your account page, are the events from your browser tied to a pseudonymous identifier, your user id and email, so we can see what to improve. Never your cards.

3. Cookies and local storage

The only cookies Reliquary sets are strictly necessary: your sign-in session, and, while you sign up, two short-lived cookies holding the Plus code you typed and the page or assistant that sent you, each gone within an hour. Your analytics answer is kept in your browser's localStorage and with your account, and Mixpanel, only if you said yes, keeps its identifier there too; without that yes it keeps nothing in your browser. A list you convert in a free tool and choose to import stays in your browser's sessionStorage until you import it or close the tab. Nothing you paste or pick in a tool is uploaded: the card tools send only card names, and the set and number a collection file gives, to look them up. We keep them nowhere but our hosting provider's short-lived request logs, described above. There is no advertising or cross-site tracking of any kind.

One more cookie holds a language and nothing else: reliquary_lang, written for a year when you open a page in a language other than English or pick one, so the site and sign-in speak it. Signed in, the language you choose on Profile is kept with your account. Closing the line that offers a page in your language is remembered in your browser's sessionStorage until you close the tab.

4. Card images and Scryfall

Card images and data are loaded directly from Scryfall by your browser — we never proxy or store them. Scryfall therefore sees your IP address when images load, under Scryfall's privacy policy.

5. Service providers

• Cloudflare — hosting, storage, content delivery, and forwarding mail sent to our reliquary.gg address (global infrastructure, EU/US data processing addendum in place).
• Stripe — payments for Plus. Stripe sells Plus to you as merchant of record and is responsible for the payment data it collects, under Stripe's privacy policy; it sends your receipts. Reliquary itself sends no email.
• Mixpanel — product analytics, configured for EU data residency: anonymous unless you consent.
• Google / GitHub — sign-in; they act as identity providers under their own policies. We receive your basic profile, nothing more.
• Google Workspace — holds the email you send us.

We share data with no one else, and we never sell it. Where providers process data outside Switzerland or the EU/EEA, transfers rest on recognized safeguards (adequacy decisions or standard contractual clauses).

6. Retention

Account and collection data are kept while your account exists. When you delete your account on your account page, they are deleted at once: your profile, collection, places, decks, published links, handle, settings and usage counts, and every connected assistant is disconnected. A Plus code you used stays marked as used, without your name. Records of a payment are kept by Stripe, and by us as far as Swiss accounting law requires (ten years). Correspondence is kept as long as needed to handle your request. Technical logs are retained briefly (days, not months). Analytics data is retained under Mixpanel's standard retention; ask us and we delete it.

7. Your rights

You can export all of your data and delete your account yourself, at any time, on your account page. You can also request access to, correction of, export of, or deletion of your personal data via compliance@pixeesoft.dev. You may object to processing, withdraw your analytics consent on your account page, or complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, under GDPR, your local supervisory authority.

8. Changes

We will update this policy as the Service evolves (for example, if analytics tooling changes) and note the date above. Material changes will be announced in the app. See also our terms of service.