‹ VAULT

Your privacy & security

VAULT is a small, ad-free passion project, and we take your trust seriously. Here’s exactly how your information is handled — in plain language, no jargon.

Is my password safe? Can anyone see it?

Yes, it’s safe — and no one can ever see it, including us. When you sign up with email, your password is run through bcrypt, a one-way scrambling process. We only store the scrambled result, never the password itself, and it can’t be reversed back. If you forget it, we literally can’t look it up — you’d use “Forgot your password?” on the sign-in screen to set a new one.

What if I sign in with Google?

Then you don’t have a password with us at all. Google handles your sign-in and tells us only that it’s really you. We never see your Google password or get access to your Google account.

Can other players see my collection or account?

No. Your vault, Essence, and account details live in a secure database protected by row-level security — rules that only ever let you read your own data. Other players can’t peek at your private collection. (If you choose to share a specific card, only that one card’s public page is shown — never your account.)

Is my data encrypted?

Yes. The entire app runs over HTTPS/TLS, so everything that travels between your device and our servers is encrypted in transit.

Do you sell my data or show ads?

Never. There are no ads, no advertising trackers, and no data brokers. VAULT is a small passion project, not an ad business. Your email is used only to sign you in and send essential account emails (confirming your address, resetting a password).

Do you track me around the web?

No. For basic, anonymous usage counts we use Plausible — a privacy-first analytics tool that is cookieless, doesn’t follow you to other sites, and never builds a personal profile of you.

Do you ever need my payment details?

No. VAULT is completely free — there’s nothing to buy, so we never ask for card or bank information. There’s simply no financial data to worry about.

Can I delete my account and data?

Absolutely — it’s your data. Just reach out and we’ll permanently remove your account and everything tied to it. We don’t hold anyone hostage.

Built with care. Questions about your data? Just ask.