Privacy Policy
Effective October 20, 2026
Who we are
Setavaria is a service for tracking trading card collections, prices, graded slabs, binders and pack openings. It is run by BetaTCG, Inc., doing business as Setavaria ("we", "us"), which operates the Setavaria website and the Setavaria apps for iPhone and Android. BetaTCG, Inc. is responsible for the information described in this policy.
This policy covers the website and both apps. Some processing differs by platform, such as app store purchases, device permissions and app lock, as described below.
Visiting this website
You don't need an account to read setavaria.com. The website has no sign-in, forms, purchases, advertising or analytics, and we set no cookies on it. Cloudflare, which hosts and protects the website, processes the technical details of each visit, such as your IP address, browser type and the pages you request, to deliver the pages and keep the site secure, and may use security cookies of its own. We run no logging of our own on it; any request logs Cloudflare shows us are kept for only a few days, and Cloudflare keeps its own records under its privacy policy.
The sections about accounts, collections, scans, subscriptions, deleting your account, cookies, device permissions and app lock apply when you use the apps or your account. The sections on where information is stored, your choices and rights, changes to this policy and contact cover website visitors too.
Who can use Setavaria
Setavaria is offered to people in the United States. You must be 18 or older to create a Setavaria account. A parent or guardian may use their own account with their children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact privacy@setavaria.com and we will delete it.
What we collect
We collect what you give us, what the service needs to work, and basic technical records. We do not use advertising trackers or third-party audience analytics.
| What | Examples | Where it comes from |
|---|---|---|
| Account | Email address, account ID, approval status. Our sign-in provider processes your password and stores only a hash of it, never the password itself. | You, at sign-up |
| Settings | Feature preferences, display options, game order | You, in Settings |
| Collection and sale history | Cards and copies, condition, notes, acquisition dates and costs, graded slabs, binders, pack-opening sessions; and sale records you enter: sale date, price, where it sold, and the cost recorded at the sale. These are records you keep; Setavaria does not process sales. | You |
| Card scans | Images you scan or upload, the text we recognize in them, proposed matches, your corrections, and technical details of each scan | You, when you scan |
| Beta program (closed) | Name, email, Discord username, US state, time zone, device and collecting details, application answers, typed NDA signature and date, shipping address and phone number | You, if you applied to or took part in our beta program before launch |
| Subscriptions | Apple and Google Play purchase and subscription identifiers, Google Play purchase tokens, product, purchase and expiry dates, renewal and payment status, and cancellation, refund or revocation information. For web subscriptions: Stripe customer, checkout, subscription and invoice identifiers, the plan, amounts, billing periods, payment attempts and their status, scheduled plan changes or cancellations, and the billing records Stripe sends us, which can include the billing name, email and address and limited card details such as the brand and last four digits | Apple or Google, when you subscribe in the app; Stripe, when you subscribe on the website |
| Technical and diagnostic | IP address, device and browser type, request times, error codes, first-party diagnostics about features such as scanning, and the text of card searches (not stored with your account) | Your device, automatically |
We never receive your full payment card number. Apple, Google or, on the website, Stripe processes subscription payments. When you first subscribe on the website, we give Stripe your email address and account ID so it can create your billing record and send receipts.
How we use it
We use your information to run Setavaria for you, and for nothing we have not described here. We do not sell your personal information or share it for targeted advertising.
- To provide the service: sign you in, save your collection and sale history, show values and gains, and apply the features your plan includes.
- To identify scanned cards: we send the image to our text-recognition provider and match the text against our card catalog.
- To improve card recognition: we keep scan images and their records, linked to your account, to test and improve scanning accuracy, including training our recognition models. Scan images and recognized text can contain personal information, so avoid capturing people, addresses or personal documents.
- To run subscriptions: validate purchases with Apple, Google and Stripe, keep your plan current, resolve billing problems and prevent fraud.
- To keep beta program records: we keep the records of our closed beta program, such as applications and NDAs, for the time shown below, and answer requests about them.
- To communicate with you: account emails such as password resets. We do not send marketing email without your consent.
- To keep Setavaria secure and working: detect abuse and automated sign-ups, prevent fraud, and investigate errors.
- To meet legal obligations: keep records the law requires and respond to lawful requests.
Subscriptions
Plus and Pro are sold through the App Store in the iPhone app and through Google Play in the Android app. Where web subscriptions are offered, they are also sold on the website through Stripe: you pay on Stripe's checkout page, and you normally manage your card, invoices, plan changes and cancellation on Stripe's billing page, opened from Manage subscription; if a change is not available there, email billing@setavaria.com. We receive records of your purchases and renewals from Apple, Google and Stripe, through their apps, server APIs and notifications, and use them to keep your plan accurate. We verify Apple's signature on the signed records Apple sends and Stripe's signature on its notifications. We link purchases to your Setavaria account with an account identifier; these records are tied to your account, not anonymous.
You manage, cancel and request refunds for an App Store or Google Play subscription through that store, under its policies. Deleting your Setavaria account does not cancel those. A web subscription is cancelled when your account deletion becomes final (see below).
Who we share it with
We use providers for hosting, databases, sign-in, file storage, email, security and image text recognition, and give them the information those services need. Apple and Google also process information when you use their app stores and payments, and Stripe when you pay on the website, under their own privacy policies. If you join our Discord community, Discord processes what you share there under its policy.
| Provider | What they do for us |
|---|---|
| Amazon Web Services | Hosting, databases, logs and encrypted secrets |
| Supabase | Sign-in and account profiles |
| Google Cloud | Card text recognition (Cloud Vision), Google Play purchase notifications, and a database server |
| Google Workspace | Sending and receiving email |
| Cloudflare | Hosting and security for this website; for the apps, network security and delivery, bot checks on forms, and file storage for scan images and beta records |
| Apple and Google Play | App distribution, purchases and subscriptions |
| Stripe | Payments for web subscriptions: checkout, card processing, receipts and the billing page |
| Discord | Our community server, if you join |
Our database also runs on servers BetaTCG, Inc. operates. We may disclose information when the law requires it, to protect our users or our rights, or as part of a merger or sale of the company, in which case the information stays subject to applicable privacy law.
Where it is stored and how long we keep it
Setavaria is based in the United States, and we store your information primarily in the United States. Some providers, such as Cloudflare's network, may process information in other countries while delivering the service. We protect information with encrypted connections, access controls and authentication. No system is completely secure; if a breach affects you, we will notify you as the law requires.
| Information | How long we keep it |
|---|---|
| Account, settings, collection, sale history and scans | While your account is open. Deleted when your account is deleted (see below). |
| Beta program records (application, NDA, shipping details) | Up to 2 years after the beta program ends; the NDA record for as long as it is in force. |
| Purchase records | As long as needed to provide your plan and meet tax, accounting and legal requirements, including after account deletion, limited to what those require. |
| App server and security logs | Up to 90 days. |
Deleted information can remain in backups until they are overwritten.
Deleting your account
You can delete your account from the Account page by typing YES to confirm. Your account is locked and we sign you out. To keep your account, sign in within 7 days and choose "Cancel deletion and keep my account"; signing in alone does not cancel it. After that, we delete your account, collection, sale history, scans and settings within 30 days. We keep only the purchase records the law requires.
If you have a web subscription, we cancel it when the 7-day window closes, without a refund for the rest of the period; Stripe keeps its own payment records as the law requires. A renewal that falls inside the 7 days can still be charged: to stop billing sooner, cancel in Manage subscription before you delete your account, or email billing@setavaria.com. App Store and Google Play subscriptions are not cancelled by deleting your account; cancel them in that store.
If you cannot sign in, email privacy@setavaria.com from your account's email address to request deletion.
Cookies and device storage
When you use your account, in the apps or signed in on the web, we use cookies and similar browser and device storage for sign-in, security, display preferences and running the service, and we collect first-party diagnostics to fix errors and improve reliability. We do not use advertising trackers or third-party audience analytics. Stripe's checkout and billing pages are run by Stripe, which uses its own cookies there.
Device permissions and app lock
Depending on your device and the feature you use, the app may ask for camera or photo access, or let you pick a single photo through your system's picker. App lock uses your device's own authentication, such as Face ID, fingerprint or your device passcode; we receive only whether it succeeded, never your biometric data. The app may keep preferences and pending scan uploads on your device so those features work. You can change permissions in your device settings at any time.
If you turn on sign-in with Face ID or fingerprint, your phone creates a private sign-in key that stays on that phone and only works after your device's own biometric check. We store the key's public part with your account, together with key identifiers and the security details your phone reports, the phone's platform and a generic name ("iPhone" or "Android phone"), a scrambled identifier for the app installation, the key's status, and when it was set up, last used or turned off and why. We use these to recognize that phone, limit sign-in keys to three phones per account and turn a key off. We never receive your biometric data.
Signing out keeps this sign-in on for that phone. To turn it off, use the "Use Face ID to sign in" switch (or its fingerprint version) on the Account page, or remove the phone under "Show devices". Resetting your Setavaria password turns it off on all your phones. A key that has been turned off stays on record as turned off.
Your choices and rights
Contact privacy@setavaria.com to see, correct or delete your information, including your scans, or to get a copy of it. Most details you can also change yourself in the app. Depending on where you live, you may also have rights to object to or restrict processing, withdraw consent, appeal our decision, or complain to your privacy authority.
We may ask for information reasonably needed to confirm it is you, or that an agent is acting for you. If you no longer have access to your account email, contact us for another way to verify. We respond within the time the law requires and explain any permitted extension or any part of a request we cannot fulfill. We will not discriminate against you for using your privacy rights.
Changes to this policy
We will post updates here with a new effective date, and give additional notice or ask for your consent when the law requires.
Contact
BetaTCG, Inc., doing business as Setavaria
8103 E US Hwy 36, PMB 254, Avon, IN 46123, USA
privacy@setavaria.com