RetroGrade Privacy Policy
This Privacy Policy explains what information RetroGrade ("the App," "we," "us") collects, why, and how it's handled. RetroGrade is a portfolio-tracking and market-data app for graded/sealed video games, published by Erik May, located in Ohio, USA (a full mailing address is available on request). If you have questions, contact us at erik.m.may@gmail.com.
1Information we collect
Information you provide or that's created by using the App
- Account information: when you sign in with "Sign in with Apple," we receive your Apple user identifier, and your email address (or the private relay email Apple generates if you choose to hide your real one) and the display name you set.
- Portfolio and collection data: the items you add to your portfolio or watchlist, purchase price/cost basis you enter, and grading/condition details you record.
- Price alerts: the thresholds and items you configure alerts for.
- Subscription status: whether you have an active Premium subscription, which product you purchased, and renewal dates — provided to us by Apple's/Google's App Store Server APIs. We do not receive or store your payment card number, billing address, or other payment instrument details — those are handled entirely by Apple/Google as the payment processor.
Information collected automatically
- Basic technical data needed to operate the service: IP address and request logs on our servers (standard web server logging), retained only as long as needed for security and troubleshooting.
- Push notification delivery: if you allow notifications, we store your device's push token, platform and app version so we can deliver them through Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android) — for example, reminders that an auction on your watchlist is ending soon, price alerts you configured, and occasional product announcements (which you can turn off in the App's notification settings).
What we do not collect
- We do not use third-party advertising or analytics SDKs. As of this version, the App does not embed any ad network or behavioral analytics library.
- We do not access your contacts, photos, camera, or precise location.
- We do not collect data from children — see Section 6.
2How we use information
We use the information above to:
- Create and secure your account, and keep you signed in.
- Show your portfolio's value, trends, and market data for items you're tracking.
- Deliver the price alerts you've configured.
- Verify and manage your Premium subscription.
- Maintain, secure, and improve the service (e.g., diagnosing errors from server logs).
- Comply with legal obligations.
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
3Third-party services we use
- Apple (Sign in with Apple, App Store payments/subscriptions, push notifications) and Google (Google Play payments/subscriptions, push notifications) — each is an independent data controller for the account/payment data they process on your device and through their platforms; see Apple's and Google's own privacy policies.
- Microsoft Azure — our backend infrastructure (hosting and databases) runs on Microsoft Azure. Azure stores and processes the data described above on our behalf, under Microsoft's standard data-processing terms.
- eBay — live listings shown in the App come from eBay's public API. We send it the item/search terms needed to find listings (e.g., a game title and platform) — we do not send your account information, portfolio contents, or any other personal data to eBay. Item values are estimated from public auction results (e.g., Heritage Auctions, Goldin) and involve no data sharing with those auction houses.
4Data retention
We retain your account and portfolio data for as long as your account is active. If you delete your account (see Section 5), we delete your personal data within 90 days, except where we must retain limited records to comply with legal, tax, or fraud-prevention obligations, or to resolve disputes.
5Your choices and rights
- Access/correct your data: your display name, portfolio, watchlist, and alerts are visible and editable directly in the App.
- Delete your account: use the in-app "Delete account" option under Profile, or contact us at erik.m.may@gmail.com to request deletion. This removes your profile, portfolio, watchlist, and alert data from our systems.
- Manage your subscription: subscriptions are managed through your Apple ID or Google account settings, including cancellation — we cannot cancel or refund a subscription on your behalf.
- Push notifications: disable them anytime in your device's system settings or in the App's notification settings. Signing out or deleting your account also unregisters your device.
- Depending on where you live, you may have additional rights under laws like the EU/UK GDPR or the California Consumer Privacy Act (CCPA), including the right to access, correct, delete, or export your data, and to object to certain processing. Contact us at erik.m.may@gmail.com to exercise these rights.
6Children's privacy
RetroGrade requires users to be at least 16 (see Terms of Service Section 3) and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us personal information, contact us at erik.m.may@gmail.com and we will delete it.
7Data security
We use industry-standard safeguards (encryption in transit, access controls, secure cloud infrastructure) to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.
8International data transfers
Our infrastructure runs on Microsoft Azure and may process or store data in regions other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
9Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the App or by email before they take effect. The "Last updated" date above reflects the most recent revision.
10Contact us
Questions about this Privacy Policy or your data: erik.m.may@gmail.com.
This document is provided as a starting point and does not constitute legal advice. Have it reviewed by a lawyer familiar with app privacy law (including GDPR/CCPA as applicable to where your users are located) before relying on it.