Memento TCG
Privacy Policy.
How we handle your information, and the choices available to you.
Effective date: September 11, 2026.
1. Who we are and what this covers
Memento TCG is operated by Cross Cordosi. This policy covers our iPhone app, mementotcg.com and support correspondence.
For privacy questions or requests, contact Cross Cordosi at support@mementotcg.com, or write to Cross Cordosi, Memento TCG, 628 Ellicott Street, Buffalo, NY 14203, United States.
2. Information we collect and why
We use information to provide your account and collecting features, support sharing, manage subscriptions, improve reliability and protect the community.
| Information | How we use it |
|---|---|
| Account and sign-in details | Identifiers, session information and details supplied by Apple, Google or Discord, which may include your name, email and profile-image reference, authenticate and protect your account. We do not receive your provider password. |
| Collecting records | Your cards, physical-copy condition and grading/certification details, acquisition information, notes, history, Binders, goals and Mementos support organization, syncing and progress. |
| Profile and community activity | Your chosen identity/photo, Room and saved revisions, authored collections, follows, blocks and activity support sharing and discovery. Shared goals and showcase interests can inform recommendations. Reports and moderation records support community safety. |
| Purchases | Account and transaction identifiers, subscription dates/status and purchase history verify Pro, manage allowances and support purchases. RevenueCat also receives your display name and handle as a support label and provides subscription analysis. We do not collect your payment-card number from Apple's purchase screen. |
| Notifications and technical records | Preferences, device/install identifiers, push tokens, delivery records, IP addresses, request details, software versions and errors support notifications, security and troubleshooting. Apple processes push-delivery information, including notification content. |
| Age checks and privacy choices | Account-linked records identify each processing purpose, choice, policy version, status, revision and update time. Age-admission records hold the age bracket, source and check evidence, policy version, status and, where applicable, a coded parent identity/reference and permission choices. We use these to enforce account access, choices and withdrawal. Admission evidence does not retain a date of birth, region, raw provider contact or sign-in token. Temporary request codes and provider checks support the approval process; a device may keep a pending withdrawal until it can be saved to your account. |
Your initial public display name and handle are generated by Memento; your sign-in provider's name, email and photo do not become your public identity by default. Profile photos you choose are uploaded and stored.
Camera scanning. We send the selected card-image crop through our server to Scrydex for recognition. It may include visible slab or certification details, so keep unrelated personal information outside the image. Memento's recognition service does not save the submitted image bytes to its database or image storage; images can remain in your active app session. Scrydex also processes the image under its service arrangements.
Before your first image upload, we ask separately whether to allow camera processing. This choice covers both inventory scanning and Quick Search. Declining leaves manual search and adding available.
Scanner diagnostics are a separate, optional choice, off unless you turn them on. With permission, we keep account-linked recognition results, corrections, timing, confidence and error categories to improve scanner reliability. These diagnostics do not store photos or certification numbers.
Separately, request identifiers, image hashes and usage records manage scan allowances and prevent duplicate charges or reuse of completed requests. A temporary successful-response copy can contain recognized certification details. These service records are separate from optional diagnostics and submitted image bytes; turning diagnostics off does not change your scan allowance.
3. What other collectors can see
New Collector Rooms start private. You can choose a public Room during onboarding or in Settings. Existing collectors keep their saved privacy choices and followers. Your display name and handle can still appear in collector search; a private Room does not hide your identity.
A public Room is visible to other signed-in collectors. A private Room is visible to approved followers, and existing followers retain access when you switch to private. Switching to public approves pending follow requests after confirmation.
Your Room can show your profile, selected cards, displayed Binders and their contents, progress and Mementos. Shared copy details can include condition, grading/certification information, acquisition date and estimated value. Review your display choices before sharing a Binder.
Publishing a community collection shares its content separately from Room privacy. Activity visibility depends on accepted follows and relevant collection subscriptions. Others may copy or screenshot information they can see; changing visibility or blocking cannot recall those copies.
4. Your choices
You can edit your records and profile, control Room sharing, manage followers and blocks, and unpublish or delete collections you created. Manage notifications in the app and camera/push permissions in iPhone Settings. Manual card search and adding are available without camera access. Push notifications may appear on your lock screen according to device settings.
In Memento Settings, Camera processing and Scanner diagnostics have separate controls. You can turn either off; declining is not automatically followed by another permission request. Turning off camera processing preserves manual search and adding for an account with access. Camera permission from iOS and agreement to the Terms do not replace these choices.
Withdrawal stops new processing for that purpose on the current device while the change is saved. If saving is not confirmed, the app keeps processing off and retains your pending withdrawal for retry. Retry until the save is confirmed before relying on the change across devices or after reinstalling; those use the choice saved to your account. Requests already submitted cannot be recalled. Withdrawal does not itself erase earlier records; see §7 and the request options in §8.
Signing out or uninstalling does not delete your cloud account. See §7 for deletion and §8 for privacy requests.
5. Providers and other disclosures
We use Supabase for authentication, cloud data and profile-image storage; Apple, Google and Discord for your chosen sign-in; Apple for purchases and push delivery; Scrydex and image hosts for recognition, catalog, pricing and artwork; RevenueCat for subscriptions; Cloudflare for website delivery, purchase verification and limited deletion/recovery records; and Google Workspace and Cloud Monitoring for support email, transactional email and operational alerts. Providers receive information needed for these functions, including technical request information. Authorized operator access supports troubleshooting, moderation and account requests.
We also disclose information through the sharing features above, when legally required, or where legally permitted and necessary to address fraud, security incidents or harm. Third-party account services and external links have their own privacy practices.
We operate from the United States. Providers may process information there and in other countries where they operate, where it may be subject to lawful access. We use access controls and encryption to protect information; no system is completely secure.
6. Website and support email
Our website provides information, App Store download and contact links, without app accounts, collection uploads or purchases. Cloudflare processes technical request information to deliver and protect it.
When you email support, we receive your address, message and any included name or attachments. We use this information to respond and handle your request. Email is stored in Google Workspace. Contacting us does not join a newsletter or waitlist. Do not send passwords, sign-in codes or full payment details.
7. Retention and account deletion
We retain collecting records to support your account and history. Edits can leave earlier private revisions. Collector Pulse activity expires after 30 days. Successful scanner retry responses expire after 10 minutes and are removed by periodic cleanup; service failures can delay removal. Other account-linked scanner records remain separately until account deletion unless removed earlier.
To permanently delete your account, open Settings → Account → Delete Account and confirm. Suspended collectors can use the deletion control on their suspension notice. After acceptance, you return to sign-in while server cleanup continues.
Deletion removes your profile, personal collecting data, Room, relationships and related activity, notifications, scanner records, age-admission and privacy-choice records, and both private and published collections you created. Active references to those creator collections are removed. Other collectors keep their independent cards, history and accomplishments. Shared catalog, artwork and prices remain. We attempt a completion email if an address is available; delivery is not guaranteed.
Limited deletion records remain for these purposes:
| Purpose | Retention |
|---|---|
| Eligible purchase recovery | Minimum proof for 30 days from accepted deletion. |
| Completion confirmation | Receipt for 30 days after cleanup. |
| Queued completion email | Unresolved address for at most seven days after cleanup, cleared earlier when resolved. |
| Preventing deleted data from returning during recovery | Minimal journal and reference markers within a 30-day restore/replay window. |
| Completed deletion-case email and resolved recovery correspondence | Reviewed weekly for permanent removal once 30 days old. |
Minimum information needed for unfinished cleanup remains until resolved. Provider logs/backups, Apple transaction records and recipient copies have separate handling; deletion does not instantly erase every external copy. Operational recovery must preserve accepted deletions.
Account deletion does not cancel Apple billing. Manage it through Apple subscriptions. A new Memento account starts empty. Support explains deletion confirmation and eligible paid-access recovery; deleted collecting data is not restored.
8. Privacy requests and young collectors
Email support@mementotcg.com for access, correction, deletion, consent withdrawal or a privacy complaint. Depending on applicable law, you may also have rights to a portable copy, limits on processing or review of a refusal. We may request proportionate identity verification, respond under applicable law and explain relevant limits. You may also contact your privacy regulator. See request instructions.
Memento is for collectors aged 13 or older in the United States and Canada. Under-13 access is blocked. Collectors complete an age check before ordinary account access. We use an available Apple age range or, where permitted, an age declaration, without asking for a date of birth or region. An age range or declaration is not identity-document verification.
At age 13, parental approval is required everywhere Memento is offered. The parent or legal guardian uses a separate sign-in to verify a provider contact, declares adult status and parental authority, and approves or declines the account request. That sign-in does not create a collector account for the parent. Ages 14 and older have no parent settings in this flow; applicable legal requirements still apply.
The parent chooses separately whether to permit camera processing and scanner diagnostics. Both are optional and off by default; parental permission lets the collector choose to activate a purpose and does not turn it on. An Apple age range or acceptance of the Terms alone is not parental approval.
A parent can withdraw approval using the saved approval reference and the same parent sign-in. This restricts ordinary account access and processing, including on return to the app, while preserving account recovery, deletion and subscription management. Already submitted requests cannot be recalled. Contact support for an age correction, a lost reference or suspected underage use. See our age and parent approval instructions.
9. Updates
We will post policy updates here with an effective date and provide any additional notice or consent required by applicable law before new processing begins.