Privacy policy
Spread collects as little as it can. There are no advertising trackers and no accounts on the public site.
Browsing the site
- Spread is hosted on Cloudflare, which processes your IP address and request details to deliver and protect the site.
- Spread counts page views itself, without cookies: when a page loads, your browser reports which page it was and which site sent you. Spread keeps daily counts and, to count unique visitors, a one-way scrambled fingerprint of your connection and browser for that day, never your IP address itself. Counts are kept for four months.
- Fonts load from Google Fonts and card images from TCGplayer's image servers, so those services see your IP address when your browser fetches them.
- A few pages remember settings in your own browser (for example, which games you hide on the alerts page). That stays on your device.
Pull Log
When you log a box opening, Spread stores the counts you enter, the set, the optional store type, the time, and a one-way scrambled fingerprint of your connection (a salted hash of your IP address). The fingerprint is used only to limit spam and can't be turned back into your IP address. No name, email or account is collected. Spread publishes only totals and anonymous entries.
Paying for Pro or Store
Payments are handled by Stripe. Spread receives your email, your plan and your payment status, never your full card number. Your email is used to give you access, send receipts, sign-in codes and service messages, and answer you. It isn't sold or shared for marketing. Sign-in codes are sent through Cloudflare's email service. Signing in sets one cookie that keeps you signed in for up to a year; it's the only cookie Spread uses.
Contact form
Messages sent through the contact form are stored privately so they can be answered, with the name and email you choose to give.
The browser extension
The Spread extension reads the TCGplayer or eBay page you're looking at, in your browser, to find which card it is and its listed price. It downloads Spread's daily price list and keeps it on your device. It doesn't send the pages you visit, your browsing history or anything about you to Spread or anyone else.
Keeping and deleting data
- Subscriber records are kept while you subscribe and as long as tax and accounting rules require afterwards.
- Pull Log entries are kept to build pull rates. Because they're anonymous, they can't be traced back to you.
- To see, correct or delete what Spread holds about you, email the contact page.
Children
Spread isn't directed at children under 13 and doesn't knowingly collect their information.
Contact
Privacy questions: the contact page.