Privacy Policy

Last updated: March 10, 2026

This notice explains how Sealed TCG Collection processes personal data under applicable law (including GDPR where applicable).

1. Data Controller

Giovanni Nicoletti
Via Stadio 10, Desio (MB), Italy
Email: giovanni@ingnicoletti.it

2. Categories of data processed

• Account data: email, name, surname, login credentials (password stored in protected form).
• User collection data: selected products, quantities, notes, purchase prices, settings and preferences.
• Technical and diagnostic data: device/app details and crash diagnostics for stability and security (Firebase Crashlytics).
• Advertising data: advertising identifiers and technical signals required to manage ads (Google Mobile Ads/AdMob), based on user consent choices.
• In-app purchase/subscription data: technical transaction metadata needed to validate premium status (payment card data is handled by stores, not stored by the app).
• Support/report data: information voluntarily sent by email or via in-app reporting features.
• Server log data: technical network/API log data (e.g. IP, timestamp, endpoint) for security and service operation.

The app does not access your contacts and does not collect precise geolocation data.

3. Purposes and legal bases

• Account management and core features (collection, backup, sync): contract performance / pre-contractual measures (Art. 6(1)(b) GDPR).
• In-app purchases and subscriptions: contract performance (Art. 6(1)(b) GDPR) and legal obligations where applicable (Art. 6(1)(c) GDPR).
• Security, abuse prevention and crash diagnostics: legitimate interest in service security and reliability (Art. 6(1)(f) GDPR).
• Personalized/non-personalized advertising: user consent where required by law (Art. 6(1)(a) GDPR).
• Support and report handling: contract performance (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR), depending on the request.
• Legal compliance: legal obligation (Art. 6(1)(c) GDPR).

4. Mandatory vs optional data

• Data required to create/manage an account and use related features is mandatory; without it, some services cannot be provided.
• Optional data (e.g. notes, reports, messages) is provided on a voluntary basis.
• Advertising consent can be withdrawn at any time through in-app consent options.

5. Recipients and processors

Data may be processed, within the stated purposes, by technical service providers acting on behalf of the Controller, including:

• cloud/hosting and infrastructure providers;
• Google Firebase Crashlytics (app diagnostics and stability);
• Google Mobile Ads (AdMob) for ad delivery;
• Apple App Store / Google Play Store for in-app purchases and subscriptions.

Data is not sold to third parties.

6. International transfers

Some providers may process data outside the EEA. In such cases, transfers are carried out using safeguards required by applicable law (e.g. Standard Contractual Clauses and/or other valid transfer mechanisms).

7. Retention periods

• Account and collection data: for the lifetime of the account; upon deletion request, data is deleted or anonymized within reasonable technical timeframes (normally within 30 days, unless legal obligations apply).
• Support/report data: up to 24 months after request handling, unless longer retention is required by law.
• Crash/diagnostic data: retained according to provider technical retention periods and only as needed for security/debugging purposes.
• Administrative/accounting data: retained for the period required by applicable law.

8. Data subject rights

You may exercise the rights provided by GDPR Articles 15-22, including:

• access;
• rectification;
• erasure (where applicable);
• restriction of processing;
• objection (where applicable);
• data portability (where technically applicable);
• withdrawal of consent at any time (without affecting prior lawful processing).

To exercise your rights: giovanni@ingnicoletti.it
You also have the right to lodge a complaint with the competent data protection authority.

9. Cookies and tracking technologies

The mobile app does not use traditional browser cookies, but may use identifiers and equivalent technologies for technical, advertising and measurement purposes.

Ad consent can be managed in the app through the consent change option in the information section.

10. Children

The service is not intentionally directed to children under 16. If you believe a child provided personal data without authorization, contact the Controller for removal.

11. Changes to this notice

This notice may be updated over time. Updates will be published on this page and, where relevant, communicated through the app or other appropriate channels.

12. Contacts

For privacy requests or questions: giovanni@ingnicoletti.it