Privacy Policy

Almost nothing. You can browse every public page on this site without giving us any personal information, without creating an account, and without being tracked across the web.

The only data involved in normal browsing is:

• Standard server logs held by our host, Vercel, which include IP address, browser type and the page requested. These are generated automatically by the hosting infrastructure and are used to serve the site and to spot abuse.
• A theme preference saved in your browser's local storage, so the site remembers whether you chose light or dark mode. It never leaves your device and we cannot read it.
• A login session cookie, but only for the private administrator area. If you are not an administrator, this is never set.

We do not run Google Analytics, advertising pixels, heatmaps, session recording, or any third-party tracking script. If that ever changes, this page will be updated first and we will ask for consent where the law requires it.

The pull data on this site is recorded from the public feeds that pack-opening sites publish themselves. It describes cards and packs, not people. Where a feed includes a username, we do not republish it as a way of identifying anyone, and we do not build profiles of individual players.

Card prices come from PriceCharting. Card details such as set, rarity and artist come from TCGdex.

Some links to pack sites are affiliate links, which are disclosed wherever they appear. When you click one, you leave PackSpy and the destination site's own privacy policy and cookies apply. That site may set a cookie to attribute the referral.

We receive aggregate reporting from those partners, for example how many sign-ups came from our link. We do not receive your name, email address or payment details, and we cannot match a sign-up back to a specific visitor.

If you contact contact@packspy.com we will hold your email and message for as long as it takes to deal with it, and for a reasonable period afterwards in case you follow up. We do not add you to a mailing list.

Under the EU GDPR you can ask us to confirm what personal data we hold about you, to correct it, to delete it, or to restrict how it is used. PackSpy is operated from Ireland, so our supervisory authority is the Irish Data Protection Commission, and you can complain to them or to the regulator in your own country.

Because we do not run analytics or accounts for ordinary visitors, in most cases the honest answer is that we hold nothing about you beyond host-level server logs. Email contact@packspy.com and we will tell you exactly what we have.

PackSpy covers paid pack-opening products and is not intended for anyone under 18. We do not knowingly collect data from children.

If what we collect changes, we will update this page and move the review date at the top. Material changes will be noted on the page rather than made quietly.