Your data, and what we do with it.

Who is responsible for your data

The service is operated by GrailPing LLC (contact: support@grailping.app), who decides how and why your information is used. You can reach us using the details on our contact page.

What we collect

• Account details. When you sign in with Google or GitHub, we receive your name and email address. If you create an account with an email and password instead, we store your email and a securely hashed password — never the password itself.
• Alert contacts. The Telegram chat you connect for alerts. As we roll out more channels to early-access users, this may also include the Discord channel you link and whether email alerts are switched on.
• Your buy lists. The cards you add, the printings and conditions you pick, your target prices, and any share links you create.
• Cookies & usage. Essential cookies that keep you signed in, and — only with your consent — analytics about how the site is used. See our cookie notice.

Why we use it

We use this information to sign you in, keep your buy lists, watch prices, and send the alerts you asked for. Where data-protection law requires a legal basis, we rely on performance of our agreement with you (running the service you signed up for), your consent (optional analytics), and our legitimate interest in keeping the service secure and working.

Who we share it with

We don't sell your data or share your buy lists with anyone for their own use. We do rely on a small number of providers to run the service: hosting and analytics (Vercel Web Analytics), email delivery, and the messaging platforms you connect for alerts (such as Telegram). They only process data on our behalf to deliver the service.

When you generate a share link, anyone with that link can see a read-only view of that list. Private details like your alert targets are not included. You can replace or turn off a share link at any time.

Where your data is handled

Your information is processed in the United States. Where data crosses borders, we rely on appropriate safeguards required by applicable law.

How long we keep it

We keep your account and buy lists for as long as your account is active. Price history we collect for charts may be summarized over time. When you ask us to delete your account, we remove your personal data within a reasonable period, except where we must keep some records to meet legal obligations.

Your choices and rights

Depending on where you live — including under the GDPR (UK/EU) and the CCPA/CPRA (California) — you may have the right to access, correct, delete, or export your data, to object to or restrict certain uses, and to withdraw consent for analytics at any time. We will not discriminate against you for exercising these rights.

To delete your account or make a request, contact us via the contact page. Self-serve account deletion is on our roadmap.

Changes to this notice

If we make material changes, we'll update the date at the top of this page and, where appropriate, let you know in the app.