Privacy policy
Effective 28 October 2026 · Parley (“we”, “us”) · Contact: [email protected]
Parley is an app that helps two people who trade trading cards find each other and agree a swap. This page says exactly what the app collects, why, who else touches it, and how to make it stop. It describes what the app actually does — not what it might do one day.
In one paragraph
We hold the account you sign up with, the card lists you enter, the trades and messages you make, and a small number of product-usage counts. We do not collect your location, your contacts, your photos or your payment details. We do not run advertising, and we do not sell or rent your data to anyone. You can switch usage data off inside the app, and you can delete your account inside the app.
What we collect
| What | Why |
|---|---|
| Account details — your email address and password, a display name, and a short profile code | To create your account, sign you in, and let another player find you to propose a trade. Passwords are hashed by our authentication provider; we never see them. |
| Your card lists — the cards you mark as available to trade and the cards you want | This is the input to matching. Nothing else about your collection is used. |
| Trades, offers and messages — the proposals you send or receive, and the messages inside a trade thread | To run the trade, show its status, and let the other player coordinate a handover with you. |
| Ratings, reports and blocks | Ratings build reputation after a completed trade. Reports freeze a trade for manual review. Blocks stop two accounts from matching, browsing or proposing to each other. |
| A push notification token — only if you turn notifications on | So a matched trade or an accepted proposal can reach your device. Turning notifications off in the app stops this. |
| Product-usage events — eight named events: sign-in, sign-out, proposal sent, proposal accepted, proposal declined, offer sent, suggestions feed viewed, and import completed. Their only properties are internal ids, a count, and whether you imported a collection or a wishlist. | To know which parts of the app are used at all. We do not record what you searched for, which cards you viewed, or any text you type. This is on by default and can be switched off in Settings. |
| Crash reports — a stack trace and your internal profile id when the app fails | So a crash that only happens on a real phone is fixable. No free text is included. |
What we do not collect
- Your location. The app never asks for it. Which store you trade at is something you choose, not something we measure.
- Your contacts, camera, photos or files. Card scanning is not part of this release; importing a list means pasting text or a CSV you supply.
- Payment or financial details. No money moves through Parley. It is free to use and takes no commission.
- Advertising identifiers, and any advertising or data-broker partner. There is none.
Who else processes it
- Supabase — our database, authentication and file storage. Your account and content live here. The project serving the app is hosted in Singapore.
- PostHog — the product-usage events described above, sent to PostHog's US region. Nothing is sent while the switch in Settings is off.
- Sentry — crash reports.
- Expo (with Google FCM and Apple APNs) — delivery of push notifications, if you enable them.
- Scryfall — the card catalogue. Card names, sets and images come from Scryfall, and card images remain the copyright of their owners; we never crop the artist or copyright line. Card data is not paywalled in Parley.
These providers process data on our instructions. We do not give your data to anyone else unless the law requires it.
Your controls
- Usage data — Settings → Share usage data. Off means nothing is sent, including anything already queued.
- Notifications — Settings → notification preferences, and your device's own settings.
- Blocking and reporting — you can block or report another player at any time. Blocking removes you from each other's suggestions and stops proposals in both directions.
- Deleting your account — Settings → delete account, inside the app. It takes effect immediately: your profile, card lists, ratings and any pending proposals are removed. Completed trades are kept with your identity stripped out, so the other player's history does not silently change — what remains is an anonymised record that a trade took place. No email to us is needed, and nothing is retained for a marketing purpose.
- Anything else — write to [email protected] and we will answer, and act on, your request.
How long we keep things
Your account and content are kept while your account exists. When you delete it, the data above goes with it, except the anonymised completed-trade record just described and any record we are required to keep by law. Crash reports and usage events are retained by those providers on their standard schedules and are not used to identify you.
Age — adults only
Parley is for adults. You must be 18 or older to create an account, and we do not knowingly collect data from anyone under 18. Trades involve meeting another person in person and, through the offer feature, handling payment between yourselves, which is why the app is not offered to minors. If we learn that an account belongs to someone under 18, we will delete it.
Changes
If this policy changes in a way that affects what we collect, we will say so in the app before the change takes effect, and the date at the top of this page will move.