Privacy Policy

Wallet address and public on-chain activity when you connect and sign in.

If you sign in with Google, Apple, or email: the account identifier that provider gives us and your email address. We do not receive or store your password, and we do not request access to your contacts, files, or any other data held by that provider.

If you use an embedded wallet: one encrypted share of your wallet key, plus your public Solana and Ethereum addresses. That single share cannot sign a transaction or rebuild your key on its own, and the assembled key never reaches our servers.

One-time email sign-in codes, stored briefly and only until they are used or expire.

Session tokens (httpOnly cookies) to keep you signed in.

Card scan images you upload for identification or grading, processed for matching and not sold to third parties.

Collection, vault, pack order, and account records stored in our database when you use those features.

Standard server logs (IP, user agent, timestamps) for security and abuse prevention.

To authenticate you, maintain your inventory, process pack orders, and operate vault workflows.

To improve scan accuracy, grading models, and pricing pipelines.

To detect abuse, rate-limit automated requests, and protect the platform.

We do not sell your personal information.

We use infrastructure providers (e.g. hosting, database), Solana RPC providers, and third-party card catalog and market-pricing data APIs.

AI vision providers may process scan images when configured. Images are sent only for identification/grading requests you initiate.

We retain account and collection data while your account is active and as needed for legal and operational purposes.

We use industry-standard transport encryption (HTTPS) and access controls on production systems. No system is 100% secure.

You may disconnect your wallet and stop using the service at any time.

If you use an embedded wallet, you can export your recovery phrase at any time and import it into any standard Solana or Ethereum wallet. You are not locked in, and you do not need our permission or our key share to leave.

Contact us to request deletion of account-associated data where applicable and not required for legal retention. Note that deleting our key share is irreversible: without it, your device share and recovery code are the only remaining way to reach that wallet.

Privacy questions: privacy@pulledit.gg