Privacy Policy

This policy explains what information Packetto collects, why we collect it, and the choices you have. We keep data collection to the minimum needed to run the collection tracker, and we never sell your personal data.

• Account details — your email address, a hashed (never plain-text) password, an optional display name, and the country you choose.
• Your collection — the albums you've started, which stickers you've marked as collected, and your duplicate counts.
• Swaps and ratings — the swap proposals you send or receive and the ratings you leave after a completed swap.
• Messages — if you use in-app chat, the content of conversations you send to other collectors.
• Support requests — the message and email you provide when you contact us.
• Technical data — basic request information (such as IP address and browser) needed to operate and secure the Service, plus your push subscription if you enable notifications.
• Camera scanning happens entirely on your device — photos from the sticker scanner are processed in your browser and are never uploaded.

• To create your account and keep your collection synced across devices;
• To show album leaderboards and match you with nearby swaps;
• To send essential emails — verification and password resets;
• To send swap-match digests and push notifications only if you turn them on (switch them off any time on your Account page, or with the unsubscribe link in any digest);
• To respond to your support messages;
• To protect the Service against abuse and bots.

Your display name, country flag, progress, achievements, and streaks appear on album leaderboards, which other signed-in collectors can see, and on your public profile page — a stable, unguessable link (/u/…) that anyone you share it with can view. When you message a collector or send a swap proposal, they see your display name and what you send, and the rating you leave after a swap is visible to your swap partner.

We keep Packetto largely self-hosted and rely on only a few third parties:

• Hosting & database — to store your account and collection on our own servers.
• Email delivery (SMTP) — to send transactional emails such as verification and resets.
• Cloudflare Turnstile — bot protection on sign-in and registration forms (when enabled).
• Stripe — payment processing if you choose to subscribe to Pro; your card details are handled entirely by Stripe under their privacy policy.
• Error monitoring and analytics run on our own self-hosted infrastructure, so that data stays with us.

We use a session cookie to keep you signed in and a preference cookie to remember your language. These are essential and cannot be turned off while you use your account. We do not use advertising or cross-site tracking cookies.

We keep your data for as long as your account exists. Verification and password-reset tokens are short-lived and expire automatically. When your account is deleted, your personal data is removed, except where we must retain something to comply with the law.

You can update your country and notification settings any time from the Account page. For anything else — access to, correction of, or deletion of your data — contact us and we'll take care of it. Every digest email includes a one-click unsubscribe link.

Packetto is not directed at children under the age required to consent to data processing in their country. If you believe a child has provided us personal data, please contact us so we can remove it.

We may update this policy from time to time. Material changes will be reflected in the “last updated” date above.

For any privacy question or request, reach us through the support page.