Privacy policy
Version of September 23, 2026. This is a translation of the French policy, which prevails in case of discrepancy.
Controller
Elyazid DAOUDI EI — RiftStash (see the legal notice, in French). Contact: contact@riftstash.app.
What we collect, and why
| Data | Purpose | Retention |
|---|---|---|
| Email, display name | Account and sign-in in the app | Life of the account |
| Collection, decks, wanted lists, price alerts, display language and currency | The app's player tools | Life of the account |
| City, region, favorite stores (optional) | Matching players with each other — never GPS coordinates | Life of the account |
| Date of birth (trading module) | Age check (16 and over). Never shown | Life of the account |
| Trades: offers, messages, reports, blocked players, ratings | Running the trading module and moderating it (message filtering, handling reports) | Life of the account |
| Device notification token | Sending you price alerts and trade updates, if you allowed it | Until sign-out or account deletion |
| Subscription purchase | Unlocking RiftStash+. The purchase goes through the App Store or Google Play; we only receive its status, never a payment method | Life of the account |
| Affiliate program application (email, name, channels, audience, and where relevant company name, registration number and country) | Reviewing the application, then paying commissions if accepted | Rejected: 12 months. Accepted: duration of the partnership, then accounting records for the legal period |
| Website audience measurement (page views, clicks to the app, device type, country inferred from the IP address) | Knowing which pages lead to installing the app | 13 months |
| App usage measurement and crash reports (screens and actions, account identifier, device model, app and OS version) | Understanding what is useful, and fixing errors. Never advertising, never resold | 13 months |
| Scan results (card recognized or not, never the image) | Counting the free quota and improving recognition | Life of the account |
| Photos of scanned cards | Recognition on the device only | Never sent, never stored |
Cookies and trackers
The website sets no cookie and writes nothing to your browser. Its audience measurement (PostHog, EU hosting) keeps an anonymous identifier in memory for the life of the tab: it disappears when you close it, and is never linked to an account. That is why no banner asks for your consent. One exception: the display currency you choose is remembered in your browser, for your convenience only, and is never sent to us.
Processors
Supabase (database and authentication, EU hosting), RevenueCat (status of the subscription bought on the App Store or Google Play), Resend (transactional email), Expo (push notifications), PostHog (website audience, app usage and crash reports, EU hosting), Netlify (website hosting). The card recognition model is downloaded once from Hugging Face: that download only transmits what any network request does (IP address), no account data.
Your rights
Access, rectification, erasure, portability, objection: write to contact@riftstash.app. Account deletion is available directly in the app (Account → Delete my account): it erases your collection, decks, wanted lists and alerts, anonymizes your profile, and keeps only what the law requires (accounting records — GDPR art. 17(3)(b)). You may lodge a complaint with the CNIL, the French data protection authority, or with the authority of your country.