Privacy

The short version

ThingDeck is built for families to turn things from their real world into trading cards. New cards and source photos are private by default. We do not sell personal information, use family photos for advertising, or show third-party ads in ThingDeck.

What ThingDeck stores

An adult account can include an email address, family profiles, generated avatars, cards, card photos, card edits, game progress, friendships, purchase entitlements, safety reports, blocks, and feedback you choose to send. We also keep ordinary technical information needed to run and secure the service, such as request and device/browser information.

Photos and card creation

Photos are re-encoded before upload so ordinary photo metadata such as EXIF location data is removed. Saved card photos are stored privately in Supabase Storage and are delivered through ThingDeck requests according to the card's visibility and the signed-in family's access.

When you ask ThingDeck to make a card from a photo, the photo is sent to Google's Gemini API so the service can understand what is pictured and write the card. ThingDeck does not currently use uploaded photos to generate replacement artwork. Generated avatars are created from words you type, not from a face photo.

Sharing, reports, and blocks

New cards start private. Cards can be shared with connected Friends or made Public only through ThingDeck's visibility controls. Shared card text is checked against a family-safety filter. People who can view another family's card can report it to ThingDeck for review. Adult profiles can disconnect or block a connected World; blocking prevents those profiles from reconnecting until the blocker chooses to unblock it.

Safety reports include the reporting profile, the card being reported, its maker, the selected reason, optional details, and review status. Reports are not shown to the reported family. ThingDeck may retain moderation records as needed to respond to safety concerns and prevent abuse.

Printing physical cards

Home printing stays on your device and uses your browser or iOS print system. If a signed-in adult explicitly chooses cards and starts a physical order, ThingDeck prepares finished card images from those selected cards and sends the approved print artwork to The Game Crafter for manufacturing. The Game Crafter handles its hosted checkout, shipping information, and payment processing. ThingDeck does not receive or store payment-card details from that checkout.

Purchases

The iPhone and iPad app may offer a one-time App Store purchase that unlocks card creation for the signed-in ThingDeck family account. Apple processes the payment. ThingDeck does not receive or store your payment-card details. We store the App Store transaction identifier, purchase time, and resulting entitlement so the unlock can be recognized and restored.

Service providers

ThingDeck currently relies on Supabase for accounts, database, and storage; Vercel for hosting; Google Gemini for AI-assisted card understanding and optional word-based avatar generation; Apple for App Store purchases in the iPhone and iPad app; and The Game Crafter only when an adult explicitly starts a physical-card order. Those providers process information as needed to provide their respective services to ThingDeck.

Children and family accounts

ThingDeck is designed around an adult account holder. Child profiles are managed within that family account and do not need their own email address. Photo access is placed behind a grown-up gate, new friend connections are adult-only, physical printer orders require a grown-up check, and the public Community currently shows samples rather than a searchable feed of family cards.

Deleting your account

Signed-in adults can start account deletion from the profile panel. Deletion removes the family's ThingDeck account data, cards, stored card photos, generated avatars, profiles, friendships, blocks, and associated account records. Some minimal records may be retained where required for security, fraud prevention, purchase verification, moderation, or legal obligations. Deleting a ThingDeck account does not cancel or refund a purchase made through Apple; App Store purchase history remains with Apple under its policies.

Questions and safety concerns

Visit ThingDeck Support for account, privacy, purchase, safety, or printing questions. Reports about a specific card can also be submitted from that card's ThingDeck Safety control.