Privacy Policy

• Account data: the email address, optional name, and a securely hashed password you provide at sign-up.
• Authentication data: a session cookie that keeps you signed in.
• Basic technical data: standard server logs (such as IP address and request metadata) used to operate and secure the Service.

We do not ask for, store, or process payment card numbers, government IDs, or financial-account credentials.

• To create and authenticate your account.
• To operate, maintain, and secure the Service — including rate limiting and abuse prevention.
• To respond to your support requests.

Passwords are hashed with bcrypt before storage — we never store or have access to your plaintext password. Traffic is encrypted in transit (HTTPS).

We rely on third parties strictly to run the Service: cloud hosting (Vercel), a managed database (Neon), and trading-card market-data providers. These providers process data on our behalf; we do not sell your personal data to anyone.

We keep account data for as long as your account is active. You may request deletion of your account and associated personal data at any time by contacting us.

You may request access to, correction of, or deletion of your personal data. The Service is not directed to children under 16, and we do not knowingly collect their data.

For privacy requests, email support@alpha-engine.app.