1 Introduction
MasterSets ("we," "us," or "our") operates the website mastersets.com (the "Site"), a trading card game collection tracking platform. We are committed to protecting the privacy of our users ("you" or "your").
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information. By using the Site, you agree to the practices described here. If you do not agree, please discontinue use of the Site.
2 Information We Collect
2.1 Information You Provide
When you create an account or use the Site's features, you may voluntarily provide:
- Email address (used for account registration and login)
- Password — stored in hashed, non-reversible form. We never store plaintext passwords.
- Username or display name
- Collection data, including cards you own, wish lists, and set completion tracking
- Any other information you choose to enter into your profile or collection
2.2 Information Collected Automatically
When you visit the Site, we and our service providers may automatically collect:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on pages, and referring URLs
- Device identifiers
- Cookies and similar tracking technologies (see Section 5)
2.3 Collection Data
The core function of MasterSets is helping you track your trading card game collection. Card data you enter — including which cards you own, quantities, variants, and completion status — is stored on our servers and associated with your account. This data is yours, and you can delete it at any time.
2.4 Guest / Local Storage Mode
If you use the Site without creating an account, any collection data you enter may be stored locally in your browser using IndexedDB or localStorage. This data does not leave your device and is not transmitted to our servers unless you create an account.
Clearing your browser data will permanently delete locally stored collection data. We have no way to recover it once cleared.
3 How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Site and its features
- Authenticate your account and manage sessions
- Save and display your card collection across devices
- Send transactional emails (e.g., account verification, password reset)
- Analyze aggregate usage patterns to improve the Site
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal obligations
We do not use your personal information to send marketing emails without your explicit consent. We do not sell your data. Ever.
4 TCGPlayer Affiliate Links
The Site contains affiliate links to TCGPlayer.com. When you click on a card price or marketplace link on MasterSets, you may be directed to TCGPlayer. If you make a purchase through one of these links, MasterSets may earn a small commission at no additional cost to you.
When you click an affiliate link, TCGPlayer may set their own cookies and collect data about your visit and any transactions you complete. That data collection is governed by TCGPlayer's own privacy policy, not this one.
MasterSets does not receive your payment details, purchase history, or personal information from TCGPlayer. We only receive aggregate affiliate commission data.
6 TCG Store & Event Map
The Site includes a TCG Store & Event Map at mastersets.com/map/ that displays nearby game stores and events.
- The map may request access to your browser's geolocation with your explicit permission to center the map near your current location.
- Your precise location is never stored on our servers or shared with third parties by MasterSets.
- Store and event data comes from publicly available listings and third-party databases such as the WPN store locator.
- The map does not require an account to use.
If you grant location access, your coordinates are used only in-session to center the map view. The moment you close the tab, that data is gone.
7 Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share information only in these limited circumstances:
- Service providers — we use third-party hosting (Namecheap) and may use other vendors to help operate the Site. These providers access data only as needed and are bound by confidentiality obligations.
- Legal requirements — we may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of MasterSets, our users, or the public.
- Business transfers — in the event of a merger, acquisition, or sale of assets, user data may transfer as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
8 Data Retention
We retain your account data and collection data for as long as your account is active.
If you ask us to delete your account, we schedule it for deletion and give you a 30-day recovery period in case you change your mind. During that time your account still works normally and you can cancel the deletion at any point from your account page. After the recovery period ends, your personal information and collection data are permanently deleted, except where we are required to retain something for legal or compliance purposes.
Server logs and aggregate analytics data may be retained for up to 12 months.
9 Data Security
We take reasonable measures to protect your information, including:
- Password hashing using industry-standard algorithms — passwords are never stored in plaintext
- HTTPS encryption for all data transmitted between your browser and our servers
- Session-based authentication with server-side validation
- Limiting access to user data to authorized personnel only
No method of internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10 Children's Privacy
The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us and we will delete that information promptly.
11 Your Rights & Choices
Depending on your jurisdiction, you may have rights including:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Deletion — request that we delete your account and associated data
- Data portability — request your collection data in a portable format
- Opt-out — opt out of any optional communications at any time
To exercise any of these rights, contact us using the information in Section 13. We will respond within a reasonable timeframe.
12 Policy Changes
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. For significant changes, we may provide additional notice — such as a banner on the Site or an email to registered users.
Your continued use of the Site after any changes constitutes your acceptance of the updated policy.
13 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: