This Privacy Policy explains what information Atlas Division collects, how it's used, and your rights regarding that information. Atlas Division (also referred to as "Atlas," "we," "us," or "our" in this policy) is currently in Alpha — an early, evolving version of the product — and this policy describes the app and website as they actually work today.
Information we collect
We collect the following categories of information when you use Atlas:
Account information
When you create an Atlas account, we collect your email address and use it to sign you in via a one-time passcode. We also store profile information you choose to set, such as a username, display name, and optional bio, along with internal account identifiers.
Profile picture
You can optionally set a profile picture from your photo library. Atlas asks for photo-library access only at that moment, crops the picture you pick to a square, reduces it to 512 pixels on your device, and stores only that copy in a private storage bucket of our backend provider (Supabase, Sydney, Australia region). It is shown in your own profile and, on your league profile, to members of leagues you share (see "Leagues" below); it is not public. You can replace or remove it at any time in Edit Profile, and it is deleted together with your account.
Collection information
Atlas lets you record a personal trading card collection. We store the cards you add, their quantities and conditions, the binders and storage locations you organize them into, and related metadata, so your collection can be restored and kept in sync across your devices.
Preferences
We store app preferences you choose, including your preferred currency, preferred market, appearance (light/dark), default game, and your Scan Photo Retention setting (see "Scan photos" below).
Progress and profile information
Atlas includes in-app progress features. We store your Atlas Member Number, XP, level, earned and equipped badges, onboarding completion status, and Founding Member / entitlement-related state associated with your account. If you pick up to three cards from your collection as your profile showcase, we store the catalog identifiers of those cards with your account on our backend provider (Supabase, Sydney, Australia region); the showcase is shown in your own profile and on your league profile (see "Leagues" below) and is deleted together with your account.
Technical information
Atlas can use two third-party tools for app reliability and product improvement. Both are off by default: nothing is sent to either of them unless you turn on Share Diagnostics in Settings, and you can turn it off again at any time. This choice is stored on your device only.
- Error/crash reporting (Sentry). With Share Diagnostics on, when the app encounters an error, basic technical diagnostic data (such as app version, general device/platform information, and details about the error itself) may be sent to Sentry to help us fix bugs. This is configured to not automatically attach personal information such as your IP address, and our integration explicitly strips any user or request identifiers before an event is sent.
- Product analytics (PostHog). With Share Diagnostics on, Atlas records a small set of anonymous, non-identifying product usage events — for example, that a scan was started, a search was run, or a pricing sync completed — to understand how the app is used and improve it. These events are tied to a random, device-level identifier, not to your account, email, or name. Location (GeoIP) enrichment is explicitly disabled. We do not use session recording, screen capture, or advertising identifiers.
Our public website (atlasdivision.org) does not use cookies or third-party analytics. The only form is the dashboard sign-in, which sends your email address to our backend provider (Supabase) to email you a one-time sign-in code.
Scan photos
Atlas's card scanner is designed to process card images primarily on-device. Text recognized from a card during scanning is used only to identify the card; it is not stored. During scanning, temporary photos of your cards may be created locally on your device.
- By default, Scan Photo Retention is Off. When it's Off, scan photos are deleted once they're no longer needed for the current scanning session.
- If you turn Scan Photo Retention On, Atlas keeps your original capture photos stored locally on that device so you can refer back to them.
- Retained scan photos are never synced to your Atlas account and never uploaded to Supabase or any other Atlas service. They stay on the device where they were captured.
- You can clear retained scan photos at any time from Data & Storage in Settings.
- Turning Scan Photo Retention from On back to Off does not delete photos you already retained — you choose when to clear them.
How we use information
We use the information described above to:
- Authenticate you and operate your Atlas account;
- Synchronize your collection data and restore your account and profile across your devices;
- Display your collection and associated value information;
- Calculate XP, levels, badges, and related progress features;
- Apply the app preferences you've chosen;
- Maintain the security and reliability of Atlas; and
- Improve and debug the Alpha product, through the optional error-reporting and analytics tooling described above (only if you opt in).
We do not use your information for advertising.
How information is stored, and who processes it
Atlas relies on a small number of service providers to operate:
- Supabase provides our authentication, database, and backend storage infrastructure.
- Third-party trading card catalog and pricing providers supply the card, set, and pricing data Atlas displays (see "Pricing and card data" below).
- Google Forms is used for our feedback and problem-report channel.
- Sentry and PostHog provide the optional error-reporting and analytics tooling described above, only if you turn on Share Diagnostics.
- Our website is hosted on standard website hosting/CDN infrastructure.
We do not list providers we don't actually use. Each provider processes information according to its own privacy practices in addition to this policy.
How we share information
Atlas does not sell your personal data. We share information only as necessary: with the service providers listed above so they can help us operate Atlas, when required by law, to protect the rights, security, or safety of Atlas or others, or with your direction. Because operating Atlas necessarily involves infrastructure providers processing data on our behalf, we don't claim that your information is never shared — only that it is shared solely for the purposes described here.
Community and public profile
Atlas's Community area and your Profile are still an early foundation, not a full public social network. Your collection is never shown to other users. Atlas only makes profile information visible to others as described below (findable profile, friends and invites, leagues, tournaments). If further social features such as public binders or chat launch, they will come with their own visibility controls, and we will update this policy before those features become available.
Findable profile and friends. Your profile is private by default. If you turn on "Findable by @username" (Settings → Privacy), any signed-in Atlas user can find you by typing the start of your username and open your profile. It shows your username, display name, bio, profile picture, Atlas level, equipped badge, whether you are a Founding Member and the (up to three) showcase cards you pinned. It never shows your email address, member number, collection, card values or tournament results. Profiles are not visible to people without an Atlas account and cannot be browsed as a list. Before you can become findable, your username, display name and bio are checked against a list of blocked words. You can send, accept and decline friend requests; you and your friends (and anyone you have an open request with) can open each other's profile even when "Findable" is off, and you can remove a friend at any time. Your friend list is visible only to you. You can invite a friend into a league or tournament you are part of: the friend sees your profile card, the league or tournament name, its game and the link to join it in their in-app inbox. Invites go only to accepted friends, disappear when you unfriend or block each other or when the friend joins or dismisses them, and expire after 14 days, after which they are deleted. You can report an invite, which reports its sender. You can block a user: you then no longer see each other, any friendship or request between you ends, and they cannot send you new requests; who you block stays private, and you can unblock in Settings. You can report a user: a report stores who reported whom, the reason you picked and an optional note, and is read only by the Atlas team to act on it, usually within 24 hours. Friendships, requests, invites, blocks and reports you sent or received are deleted together with your account.
Leagues. If you create or join a private league, the other members of that league see the display name you pick for it, your places and your points in its league nights, and on your league profile your profile picture, your Atlas level, your equipped badge, whether you are a Founding Member, your rank, points, nights and wins in the league's current season, and the (up to three) showcase cards you pinned on your profile — only while you share a league with them; your username, email, member number, collection, tournament results outside the league and other profile details stay private. Leagues are never public or searchable. If you leave or are removed, you disappear from the current table at once; the final tables of seasons that already ended keep your display name as it was then. When the owner deletes a league, its tables and invite code are deleted for everyone (its league nights stay as ordinary tournaments). Deleting your account removes your league memberships, and any league you own, together with your account.
League chat. If you write in a league chat, the other members of that league see your message, the display name you use in that league and the time — nothing else, and only inside that league. Messages are stored on our servers (Supabase) but are not end-to-end encrypted. We read a message only if someone reports it, to decide whether to remove it; reports and blocks are stored for that purpose. Messages are deleted automatically after 90 days, when you delete them, when you leave or are removed from the league, when the league is deleted, and when you delete your account. If a message was reported before that, we keep a copy of its text until the report is decided, at most for those 90 days, even if you delete the message or leave the league. Deleting the league or your account removes that copy too. Your blocks and reports are deleted with your account. Chat messages are never used for analytics or advertising, and we send no push notifications for them. Legal basis: providing the chat you chose to use (Art. 6(1)(b) GDPR); moderation of reported messages: our legitimate interest in a safe service and our legal duties as a host (Art. 6(1)(c) and (f) GDPR).
Tournaments. If you host or join a tournament, the event is shown on a web page (atlasdivision.org/t/…) and in the app. That page is readable by anyone who has its link, without an account, and public events are also listed on atlasdivision.org/tournaments. A "private" tournament is not listed or searchable, but it is not secret either: anyone with its link can open it. The page shows the event details, the host's display name (if they have set one), the display name each player entered when joining (it is not taken from your profile, so you can use a nickname), their status and final place, all round pairings and results, and the host's change log. It never shows your email address, collection or profile picture. When an event finishes, hosts and players earn XP and badges and see their own tournament record; these are shown only to you. If you delete your account, tournaments you host that are not yet finished are deleted; for finished events the archive stays, your name on it becomes "Deleted player", and you are no longer shown as host. Names a host typed in for guests are the host's responsibility and are removed on request ([email protected]).
Pricing and card data
Atlas retrieves card, set, and pricing information from third-party catalog and pricing providers to display alongside your collection. These lookups are handled by Atlas's backend using general catalog identifiers (such as a card or printing reference) — your personal identity and the contents of your personal collection are not sent to these third-party pricing providers as part of displaying prices. Card and sealed product images are loaded directly from the image servers of these catalog providers (for example pokemontcg.io, Scryfall, Scrydex, DOTGG and TCGplayer), in the app and on the website dashboard. As with any web request, this shares your IP address and device or browser type with that provider; no account or collection data is sent.
Data retention
We retain information in the following practical categories:
- Account and profile information is retained while your account exists, or as needed to operate Atlas. When you delete your account, it is removed (see "Your rights and requests").
- Collection and sync data is retained while your account exists, unless you delete specific entries.
- XP, Member Number, and badge records remain tied to your account.
- Local app caches can be cleared from your device and are reconstructable from your account data.
- Retained scan photos (if you've turned that setting on) remain on your device until you clear them or uninstall the app, subject to your device's own storage behavior.
- Feedback submitted through our Google Form is governed by that submission process.
Because Atlas is in Alpha, we don't promise an exact server-side deletion window beyond the categories above.
Your rights and requests
You can delete your account yourself at any time in the app: Settings → Delete account. This permanently deletes your Atlas account, your collection, binders, profile picture, XP and badges, friends, invites, blocks and reports, both on your device and on our servers, and cannot be undone.
To delete your account without the app, email [email protected] from the address you sign in with and write "Delete my account"; we delete the account and all its data within 30 days and confirm by email, and copies in our encrypted backups are overwritten within a further 7 days.
Depending on where you live, you may also have rights to access or correct your information, or to ask questions about how it's handled. For any privacy request, email [email protected].
Children's privacy
Atlas is not intended for children under 13, or the applicable minimum age in your jurisdiction, and we do not knowingly collect information from children below that age.
International data transfers
Atlas's infrastructure providers may operate and process information internationally. By using Atlas, you understand that your information may be processed in countries other than your own.
Security
We use reasonable technical and organizational measures designed to protect your information. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
Changes to this policy
This Privacy Policy may change as Atlas evolves, especially during this Alpha period. If we make material changes, we'll update the effective date above.
Contact
Questions about this policy can be sent to [email protected].