DeckEX Privacy Policy
01Scope and our role
DeckEX is an all-ages Pokémon card collection product offered on the web, iOS, and Android. Users younger than 18 have protected collection accounts. Their approved public profiles can display a chosen username, chosen profile image, publicly selected cards, wishlists and collection statistics. Other users can view these pages but cannot message, follow, like, comment on, mention, tag, friend-request, offer to trade with, or otherwise contact a protected account within DeckEX. Protected accounts cannot publish social posts, send messages or use adult marketplace features. No adult or parent exception creates minor messaging access.
This policy explains the information associated with DeckEX accounts, uploaded card content, public profiles and adult-only community features. A chosen username does not make a public profile anonymous. Anyone, including people without DeckEX accounts, may copy or preserve information the account holder chooses to publish.
02Information needed to operate DeckEX
Account information includes username, date of birth or verified age status, sign-in email or external sign-in identifier, authentication records, selected profile picture, account settings and device/session security information. For underage accounts, we additionally maintain guardian-account linkage where required, consent status and the verification result necessary to support consent.
Collection information includes card identifiers, quantities, lists, albums, wishlists, public-versus-private selections, card images and collection statistics. An adult may also provide adult-only listings, posts, messages, reports or moderation appeals.
Technical information necessary for operation may include IP address, device type, application version, basic diagnostics, login and security event logs and essential session cookies. Camera and photo-library access is requested only when a person uses relevant photo features; permissions can be changed in device settings. DeckEX does not need precise GPS coordinates for ordinary collection management.
03How information is used
We use information to create and authenticate accounts; maintain collections and wishlists; display public content chosen for publication; manage parent approvals; enforce age-based access restrictions; provide support; investigate reports; detect misuse; preserve service security; and meet legal obligations. We do not use information from children for personalized advertising or sell child information.
Public-profile information may be displayed to visitors as described above. Private account information and login contacts are not public profile fields. DeckEX will strip photo location metadata from published images and review reported usernames or images that disclose contact details or unsafe content.
04Child accounts and public profiles
For children younger than 13, we obtain legally sufficient verifiable parental consent before collecting personal information except for narrow legally permitted notice or verification steps. A private child account and a child profile visible to the public require separate choices where required. Public visibility is off unless an authorized parent enables it following the required verification. Parents can withdraw permission and request review or deletion.
Teen accounts remain protected from all DeckEX contact and marketplace functionality. In jurisdictions requiring guardian permission for teens, the same protective consent flow applies. We do not enable communications with protected accounts based on friendship, family status or prior friendship.
05Adults, messaging and public content
Adults may use adult-only posts, listings and direct messages where those features are enabled. Messages and posted content are processed to deliver the feature and respond to reports, security issues and legal requests. Blocking does not retroactively remove information already shared with another adult. Other users may capture public content or previously received messages.
07Data retention
DeckEX retains live account and collection data while an account is active and necessary to deliver requested features. Once account deletion is confirmed, public profiles are removed promptly and ordinary account content is targeted for deletion from live systems within 30 days; routine encrypted backup copies expire within 90 days, subject to legal holds. Operational access logs are ordinarily held for up to 90 days. Report evidence may be held only for a defined, documented investigation or lawful preservation duty. Actual deletion practices must match these periods before publication.
08Rights and controls
Account holders can edit collection visibility and profile information, withdraw applicable consents, request access or correction and initiate account deletion. Verified parents may exercise legally applicable rights on behalf of their children, including revoking public visibility and reviewing or deleting child information. Additional regional rights may apply. Requests are available through Help and Safety.
09Safeguards and international access
DeckEX uses access controls, encryption in transit, restricted administrative permissions, security logging and reasonable incident-response measures. No online system is perfectly secure. Launch in a jurisdiction is conditioned on appropriate lawful transfer arrangements and any required regional disclosures.
10Contact and changes
Users and parents can submit privacy, safety, account and copyright requests through DeckEX Help and Safety in the app or on the website. The same channel accepts account-deletion requests and requests to appeal an enforcement action. Urgent reports should be marked Child Safety or Immediate Danger. If someone is in immediate danger, contact local emergency services.
Material changes are displayed in the product and communicated to guardians when the law requires new notice or consent. Children are not enrolled in materially expanded data uses without required consent.