Privacy Policy
Effective Date: 2026-07-10
This Privacy Policy explains how Egghead Labs ("we," "us," or "our") collects, uses, shares, and retains information when you use Blind Box Tracker (the "Application").
Account information. When you sign in with Apple or Google, we receive and store an account identifier and may receive your name, email address, and authentication provider. Apple or Google may limit the information shared with us based on your settings.
Collection and user content. We store the collectible records and quantities you choose to mark as owned, wishlisted, or available for trade; collection and app preferences; series and store alert watches; notification preferences; display name; and any support message you submit. Series suggestions are stored separately without your account identifier, email address, or display name. Text added to an exported image is processed on your device and is not uploaded by us solely because you create an export.
Subscription information. Purchases are processed by Apple App Store or Google Play. We may receive and store product identifiers, transaction or purchase tokens, subscription status, trial or introductory-offer status, expiration and renewal information, and entitlement history so we can unlock membership features, restore purchases, prevent fraud, and provide support. We do not receive or store your full payment-card details.
Notification information. If you enable store alerts, we collect a device push token, device platform, alert preferences, watched series or stores, and delivery records needed to send alerts and suppress duplicates. Notification permission is requested only when you choose to enable alerts.
Analytics and usage information. We use Google Analytics for Firebase to understand how the Application is used and to improve activation, reliability, and subscription experiences. This may include an app instance or device identifier, your internal user ID after sign-in, authentication method, membership state, country or approximate region inferred by the service provider, screen views, feature interactions, collection and collectible identifiers or names, tracking milestones, alert actions, paywall source, selected subscription plan, trial status, purchase results, and general engagement metrics. Search analytics include the query length and result count, not the search text itself. We do not send your name, email address, series-suggestion text, support-message text, or export-message text to Firebase Analytics as event parameters.
Diagnostics. Firebase Crashlytics may collect crash reports, diagnostic logs, app version, device model, operating-system version, app instance or installation identifiers, and technical state at the time of a crash or error. We use this information to diagnose problems and improve reliability.
Network and store-page information. Our service checks official and selected retailer product pages to provide availability information. If you open an external store or official-source link, that website receives information normally sent by your browser or device and applies its own privacy policy.
We may send occasional emails about product updates, collection tracking features, or related Blind Box Tracker news where permitted by law. Marketing emails will explain why you are receiving them and include an unsubscribe option where required. You may unsubscribe at any time using the link in a marketing email, visiting the Marketing Email Opt-Out page, or contacting us at eggheadlabs.dev@gmail.com. Unsubscribing does not stop required account, security, legal, support, purchase, or service-related messages.
We do not sell or rent your personal information. We do not use your information for third-party advertising, and we do not permit cross-app or cross-site tracking for advertising purposes.
We share information only as needed with service providers that process information on our behalf, including:
These providers process information under their own terms and privacy policies. Relevant policies include:
We may also disclose information when required by law; to respond to lawful requests; to investigate fraud or security incidents; to protect our rights, users, or the public; or as part of a merger, financing, acquisition, or transfer of the Application, subject to appropriate safeguards.
We retain account and collection data while your account is active and as reasonably necessary to provide the Application. When the in-app delete-account process completes, it deletes your Firebase Authentication account and the core collection records, watchlists, notification-token records, alert preferences, and app preferences associated with that account.
Some records may be retained for a limited period where reasonably necessary for subscription verification, transaction accounting, fraud prevention, notification deduplication, security, backups, dispute resolution, or legal compliance. Analytics and diagnostic information may remain in de-identified or pseudonymous form according to our configured retention settings and the service providers' retention processes. Apple and Google retain purchase and account records under their own policies. Deleting your account does not cancel an active store subscription; you must cancel it through Apple or Google.
Because series suggestions are stored without an account identifier, email address, or display name, they are not connected to your account and are not included in account deletion.
You may contact us to request access, correction, or deletion of personal information. We may need to verify your identity and may retain information where permitted or required by law.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Our service providers may process information in countries other than where you live. Where required, we rely on appropriate legal mechanisms and safeguards for international data transfers.
The Application is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us at eggheadlabs.dev@gmail.com and we will take appropriate steps.
We may update this Privacy Policy from time to time. We will post the updated policy and effective date on this page and may provide additional notice when required. Previous versions are available in the Legal Archive.
Archived versions include policies effective 2025-02-27, 2026-04-27, 2026-05-13, and 2026-07-09.
If you have questions or requests regarding privacy, contact Egghead Labs at eggheadlabs.dev@gmail.com.