Privacy Policy

Last updated October 2026

1. The short version

Opening packs does not require an account. There are no ads, and we don’t sell your information. Cloud backup is optional: if you subscribe and sign in with Google or Apple, we store your binder with your account so you can restore it later. Pull Arena, an optional weekly competition, also needs a Google or Apple sign-in. The Arena Pass, an optional subscription for Pull Arena, adds your subscription tier to what we store, and shows it to other players as a ball. Both are covered under their own headings below.

2. What stays on your device

Your collection and settings are saved locally on this device. If you never sign in, they never leave it.

3. Usage counts

To see which parts of the app people use, the app tells our server when a few things happen, such as opening the app, opening a pack, visiting Pull Arena, or viewing the Arena Pass. Each report carries only the name of that step and a random number made when the app was installed. It is not linked to your account, your handle, or your cards, and we keep these counts for 90 days. Clearing the app’s data makes a new random number.

4. Optional cloud backup

Cloud backup is a monthly subscription through Google Play or the App Store. It renews until you cancel it in the store. RevenueCat verifies that purchase. Signing in with Google or Apple uses Firebase Authentication. We then store your account identifier (and email, if Google or Apple provides it; Apple can give a private relay address instead) and a copy of your binder in Cloud Firestore, so the same account can restore the subscription and the binder on another device. Optional one-time support tips are also processed by the store; they do not unlock backup or any other feature. We don’t use this for ads or analytics.

5. Google sign-in data

Signing in with Google asks only for the basic sign-in details: your Google account identifier, email address, name, and profile photo. Firebase keeps them on the sign-in account it creates for you. We use the identifier to link your cloud backup, Arena Pass, and Pull Arena data to that account, and the email to show which account is signed in, in Settings. We don’t use your name or photo, and we never ask for access to your Gmail, Drive, contacts, or any other Google data. We don’t sell Google user data, use it for ads, or share it with anyone except the services listed under Who processes this. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Deleting the cloud backup removes the Firebase account and this data.

6. Pull Arena (optional)

Pull Arena is a free weekly pack-opening competition. To join you sign in with Google or Apple. We store your account identifier (through Firebase), a handle we generate for you such as Trainer-4821, which is not your name or email and can’t be changed, the packs you open each round and the cards in them, your scores, and your badges. Arena packs are rolled on our server and never go into your binder on this device. Everyone can see your handle, rank, and scores on the weekly boards. When a round ends we publish its final board: each player’s handle, scores, and the cards they pulled. Your email and account name are never shown. If you enter a friend’s invite code, which comes from their handle, we store that they invited you, and you can each see the other’s handle. If you use Grading or the Exchange, we store the cards you send, their grades, your posts and offers, and the swaps you make. Other players see your handle with your posts and offers, the handle of whoever you swapped with, and the slabs you pin to your profile. Nothing in Pull Arena is a prize or has real value.

7. Arena Pass (optional)

The Arena Pass is a subscription through Google Play or the App Store. RevenueCat verifies the purchase and tells our server which tier your account identifier holds and when the paid period ends. We store that, with the store product, so the extra packs are granted and stop when the pass ends. We do not receive your card or payment details, your name, or your email from the store. Your tier is public: it shows as a ball (Great, Ultra, Premier, or Master Ball) beside your handle on the weekly boards and your profile, and the final boards we publish record the tier you held when the round ended. The badge for a tier you held stays on your profile after the pass ends. Nobody else sees your account, your email, or what you paid. The subscription record is tied to your account identifier, not your handle. Delete my Arena data keeps it, so extra packs return if you join again; deleting the cloud backup erases it with the rest of your account data. Neither cancels the subscription: cancel it in the store, or a renewal can record it again for the deleted account.

8. Card data

Card images and details are loaded from a public Pokémon TCG card database to display packs. These are ordinary web requests for images and card info — no account data is attached. When you download a set for offline use, its art is saved to your device’s storage so it can be shown without a connection.

9. Your control

Reset collection wipes cards on this device. Sign out stops syncing but leaves the cloud copy. Delete cloud backup in Settings removes the server copy and the Firebase account we created for you. Clearing the app’s data removes local cards, settings, and downloaded set art. Your subscriptions stay with your Google Play or App Store account until you cancel them there, and you keep what you paid for until the period ends. Subscriptions and one-time support tips are not refunded from this screen. Delete my Arena data, at the bottom of the Arena tab, erases your handle, packs, scores, badges, invites, slabs, and Exchange posts and offers from our database. It does not cancel a subscription or erase the subscription record described above. Deleting the cloud backup erases all of that, the subscription record included, once it has removed the account. Final boards already published keep the handle, pulls, and tier, but nothing links them to you once your data is deleted.

10. Who processes this

Google (Play Billing, Sign-In, and Firebase), Apple (App Store payments and Sign in with Apple) and RevenueCat process the data above so we can sell the backup plan, the Arena Pass, and optional support tips, and keep the backup and your pass. Cloudflare hosts Pull Arena, including the subscription record, and the card data, and handles your requests, so it sees your IP address and may keep it in short-lived request logs. We don’t sell any of this or share it for advertising.

11. Children

The app is meant for a general audience and is not directed at children under 13. Don’t create a cloud-backup or Pull Arena account, or buy a subscription, for a child. Pack opening itself does not collect personal information.