Privacy Policy

1. Introduction

Final Forge ("we", "our", "the app") is a binder builder and collection tracker for Magic: The Gathering card sets. This privacy policy explains how we collect, use, and protect your information when you use the Final Forge mobile application and website.

For questions about this policy, contact us at support@finalforge.app.

2. Information We Collect

Information you provide directly

• Email address (account registration)
• Username (profile)
• First name and last name (profile, optional)
• Password (hashed, never stored in plaintext — handled by Supabase)
• Card collection data (cards owned, quantities, foil status)
• App settings and preferences

Information collected automatically

• Device type and operating system version
• App version
• Supabase-generated user ID (UUID)
• Session tokens (for authentication)

Information we do NOT collect

• Location data
• Contacts, photos, or media
• Advertising identifiers
• Browsing history
• Financial or payment information

3. How We Use Your Information

• Account creation and authentication
• Persisting your card collection across devices
• Syncing settings and preferences
• Responding to support requests

Your information is not used for advertising, profiling, or sold to third parties.

4. Data Storage and Security

• Data is stored in Supabase (hosted on AWS, US-East-2)
• All data is transmitted over HTTPS/TLS encryption
• Passwords are hashed using bcrypt (Supabase default)
• Row Level Security (RLS) policies ensure users can only access their own data

5. Third-Party Services

• Supabase — authentication and database (Supabase Privacy Policy)

We do not share your data with advertisers or data brokers.

6. Data Retention

• Account data is retained while your account is active
• Upon account deletion, all personal data is permanently deleted within 30 days
• Guest mode data is stored only on your device (AsyncStorage) and is never transmitted to our servers

7. Your Rights

All users may:

• Access their data via the in-app export feature
• Delete their account and all associated data (in-app or at build.finalforge.app/delete-account)
• Correct their data via profile editing

EU/EEA Users (GDPR)

You have the right to access, rectification, erasure, restriction, and data portability. You may withdraw consent at any time and lodge a complaint with your supervisory authority. Our legal basis for processing is consent and contract performance.

California Users (CCPA)

You have the right to know what data we collect, request deletion, and opt out of the sale of personal information. We do not sell your data. You will not be discriminated against for exercising these rights.

8. Children's Privacy

Final Forge is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, it will be deleted promptly.

9. International Data Transfers

Your data may be transferred to and processed in the United States where our servers are located.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted at this URL with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.

11. Contact

Email: support@finalforge.app

GitHub: github.com/rshelnutt/final-forge/issues