Effective date: September 26, 2026
Last updated: September 26, 2026
Stormin Sports Cards ("Stormin," "we," "us," or "our") is operated by McQ Technologies, Inc., a Delaware corporation. This Privacy Policy explains what information we collect when you use our website at stormin.ai and our web application at app.stormin.ai (together, the "Service"), how we use it, and the choices you have.
Scope. This policy covers the Stormin collector app and your account. Additional terms apply to purchases of sealed packs through our online shop.
Stormin is currently in beta. Features and data practices may change as the Service develops, and we will update this policy when they do.
If you have questions about this policy, contact us at Ethan@stormin.ai.
1. Information We Collect
Information you give us
Account information. When you create an account, we collect your email address and a password. If you sign up using Google, Google provides us with your name, email address, profile picture, and Google account identifier. We never receive or store your Google password.
Profile information. Your username, display name, profile photo, and any other details you choose to add to your public profile.
Collection data. The cards you add to your collection, including player or character, set, year, card number, grade, quantity, notes, and any purchase price you choose to enter. Purchase prices are optional and are never filled in automatically.
Images. Photos of cards you upload or capture with the card scanner.
Communications. Messages you send us by email, and feedback or bug reports you submit through the Service.
Newsletter preference. If you check the newsletter box when signing up, we record that you opted in.
Information collected automatically
Usage and device information. When you use the Service, we and our service providers automatically collect your IP address, browser type, device type, operating system, pages viewed, features used, referring page, and timestamps. We use IP addresses in part to apply usage limits for visitors who are not signed in.
Cookies and similar technologies. We use cookies and browser local storage to keep you signed in, remember your preferences, and keep the Service secure. Most browsers let you block or delete cookies, but parts of the Service may not work correctly if you do.
Information from third parties
Google. If you use Google sign-in, we receive the account details described above. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Market data providers. We license card sales and market data from third-party providers to display card values and comparable sales. This data is about cards, not about you, and we do not send your personal information to these providers in order to obtain it.
2. How We Use Information
We use the information we collect to:
- create and maintain your account and authenticate you when you sign in;
- store, display, and organize your card collection;
- run the card scanner and match scanned cards to our database;
- display card values, comparable sales, and collection insights;
- show your public profile and collection to other users as described below;
- send you transactional emails such as welcome messages, password resets, and account notices;
- send you our newsletter, if you opted in;
- respond to your questions, feedback, and support requests;
- monitor, debug, and improve the Service, including the accuracy of the scanner and our card data;
- apply usage limits and detect abuse, fraud, and security incidents; and
- comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.
3. What Other Users Can See
Your profile and the cards in your collection are visible to other users of the Service.
Dollar values are private. The estimated value of your cards, your collection total, any purchase prices you enter, and your gains and losses are visible only to you. Other users can see which cards you own, but not what they are worth to you or what you paid.
You can control what appears on your profile through your account settings.
4. How We Share Information
We share personal information only in the following circumstances.
Service providers. We use third-party companies to operate the Service. Each has access only to the information needed to perform its function:
| Provider | What it does | What it handles |
|---|---|---|
| Supabase | Authentication, database, and file storage | Account credentials, collection data, uploaded images |
| Replit | Application hosting | Traffic and request data |
| Squarespace | Website hosting and domain | Website traffic data |
| Sign-in | Account identity for users who use Google sign-in | |
| Resend | Transactional and newsletter email delivery | Email address, message content |
Legal reasons. We may disclose information if we believe in good faith that it is required by law, subpoena, or legal process, or is necessary to protect the rights, property, or safety of Stormin, our users, or the public.
Business transfers. If McQ Technologies, Inc. is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
With your direction. We will share information in other ways when you ask us to.
5. Third-Party Tracking and Do Not Track
Third-party collection. Third parties, including the service providers listed above and any analytics tools we use, may collect personally identifiable information about your online activities over time and across different websites when you use the Service. We do not authorize any third party to collect your information from the Service for behavioral advertising purposes.
Do Not Track. Some browsers can send a "Do Not Track" signal. There is no common industry standard for how to interpret these signals, and the Service does not currently respond to them differently from ordinary requests.
6. Data Retention and Deleting Your Account
We keep your account information and collection data for as long as your account is active.
You may request deletion of your account and its associated data at any time by emailing Ethan@stormin.ai from the address on your account. We will delete your account, profile, collection data, and uploaded images within 30 days of a verified request, except where we are required to retain records by law.
Backup copies may persist for a limited period after deletion as part of our normal backup cycle. Aggregated or de-identified data that cannot reasonably be used to identify you may be retained.
7. Your Choices and Rights
Access and correction. You can view and edit your profile and collection data at any time within the Service. For anything you cannot change yourself, email us.
Newsletter. Every newsletter email includes an unsubscribe link. You can also email us to opt out. You will still receive transactional emails about your account.
Google sign-in. You can revoke Stormin's access to your Google account at any time through your Google account permissions page. Doing so will prevent you from signing in with Google, so set a password first if you want to keep access to your account.
Cookies. You can block or delete cookies through your browser settings.
California residents. California law gives residents the right to request information about the categories of personal information we disclose to third parties for their direct marketing purposes. We do not disclose personal information for that purpose. Depending on your circumstances and applicable law, you may also have rights to request access to, correction of, or deletion of your personal information. Email us at Ethan@stormin.ai and we will respond as required by law.
Other states and countries. If you live somewhere with comprehensive privacy legislation, you may have similar rights. Contact us and we will honor any request the law requires us to honor.
8. Security
We use reasonable administrative and technical measures to protect your information, including encrypted connections, hashed passwords, and access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Because the Service is in beta, you should not rely on it as the only record of your collection. Keep your own records of anything important to you.
9. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, email us at Ethan@stormin.ai and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes to how we handle your personal information, we will notify account holders by email at the address associated with the account, or by a notice within the Service, before the changes take effect. Your continued use of the Service after the effective date means you accept the updated policy.
11. Contact Us
Questions, requests, or concerns about this policy or your information:
Email: Ethan@stormin.ai
Operated by: McQ Technologies, Inc.