Privacy Policy

DRAFT, pending attorney review. This page is a working draft and is not final legal text.

Last updated October 23, 2026.

What we collect

• Newsletter / weekly digest and price-alert email waitlist: these sign-ups are limited to people aged 21 or older. You enter your age on the form. Our server checks it and refuses the sign-up if it's missing, invalid or under 21, and in that case nothing is stored. We never store your age. We keep your email (and a normalized version used to prevent duplicates), which list(s) you joined, the page you signed up from, the sign-up date, any cards you listed for alerts, and a yes/no flag that you confirmed you're 21+ with the time you confirmed. This is stored in Netlify Blobs and used only to send what you asked for. You can unsubscribe at any time.
• Contact form: the name, email and message you send, processed by our host Netlify (Netlify Forms), used only to reply to you.
• Referral program: sign-up is limited to people aged 21 or older. We ask for your age on the form but don't store it. We keep only a yes/no flag that you confirmed you're 21+ and the time you confirmed. If you sign up, we store your email (and a normalized version used to prevent duplicates), your referral code, who referred you, the date, whether your email is verified, and a one-way hash of your IP address for abuse prevention. This is stored in Netlify Blobs. We use it only to run the program and check Premium access. You can delete it any time from your referral dashboard. If email verification is turned on, we'll send you a one-time verification email through our email provider.
• Browser storage (localStorage): theme, Terms acceptance, referral code you arrived with, your account token, watchlist and grails, alerts and fired alerts, box logs, owned cards, and last-visit prices. This stays on your device unless you're signed in, in which case your alerts are also saved to your account so they sync.
• Server logs: our host may process standard technical data (IP address, user agent) to deliver and secure the site.

Cookies

PullMeter itself sets no cookies and runs no analytics. Netlify Forms may use a spam-prevention mechanism. If we later enable ads (Google AdSense) or affiliate tracking, those third parties may use cookies, and we'll update this policy and add any required consent controls first. See how Google uses data.

Third-party requests

Your browser loads card images from the Pokémon TCG API's image hosts (images.pokemontcg.io and images.scrydex.com), and affiliate links take you to third-party sites. We don't load external fonts or trackers.

Your choices

You can clear your browser storage, delete your referral data from the dashboard, unsubscribe using the link in any email, or contact us to request access or deletion.

Age requirement and children

Anyone can browse PullMeter and use the free tools without an account. Signing up for anything (the referral/Premium program, the newsletter or weekly digest, or the email alert waitlist) requires you to be 21 or older. We don't verify ID. We rely on the age you enter, check it on our server, and store only a yes/no confirmation and its timestamp, never your age. PullMeter isn't directed at children under 13. If you believe someone under 21 has signed up, contact us and we'll delete the record.