Privacy Policy

Your email address. You sign in with Apple, Google, Discord, or a one-time code sent to your email. Whichever you pick, we end up with your email address. We use it to identify your account and nothing else. Other traders never see it.

A username and an avatar. Both are generated for you when you sign up — a name like "SwiftRanger_4821" and a picture derived from your account id. You can change the name and pick a different generated avatar. You cannot upload a photo, and we never ask for one.

The cards you mark. The cards you own and the cards you want. This is the whole point of the app: it is what we match on.

Your trading activity. Trade requests you send and receive, trades you complete, ratings you give and receive, and reports you file.

When you were last active. A timestamp, so other traders can see who is around.

A notification token. Only if you turn push notifications on. Turning them off deletes it.

No location. No contacts. No camera or photo library access — the app does not ask for these permissions at all. No advertising identifiers, and no ad tracking of any kind. We do not show ads, we never will, and we do not sell your data to anyone.

Any signed-in MonHub user can see your username, your avatar, your rating and trade count, and the full list of cards you own and want. That is deliberate — matching does not work otherwise — but you should know it before you fill your lists in.

They cannot see your email address, your trade history with other people, ratings you gave, or reports you filed.

We use a small number of companies to actually run the app. They process data on our behalf, under contract, and are not allowed to use it for their own purposes.

Supabase — hosts our database and handles sign-in. Everything above lives there.

Expo — delivers push notifications. Receives your notification token and the text of the notification, which includes the other trader's username.

Mixpanel — product analytics. Receives your account id, your email address, your username, and what you do in the app (screens opened, cards added, searches typed).

Adapty — handles subscriptions. Receives your account id and purchase records. Never receives your email or username.

DiceBear — generates avatar images. Your device fetches avatars from them, so they see your IP address and the account id in the image address.

Cloudflare — serves the card images. Sees your IP address, as any image host would.

Open Profile → Delete account in the app. It is immediate and it is not reversible. There is no form to fill in and nobody to email.

That deletes your profile, your email address, your card lists, your notification token, your open trade requests, and every rating and report about you.

Two things survive, with your identity stripped out of them: completed trades, so the person you traded with keeps their own history and trade count; and ratings and reports you left about other people, because those describe them, not you. Once you are gone, those records no longer point at you — the other trader just sees "Deleted user".

Deleting your account does not automatically erase the copies held by Mixpanel and Adapty. Email us and we will remove them.

Your account data stays until you delete your account. Analytics data is kept by Mixpanel under their own retention schedule.

If you are in the UK, the EU, or anywhere with similar law, you can ask for a copy of your data, ask us to correct it, or ask us to erase it. Deleting your account does the last one instantly; for anything else, email us. You can also complain to your local data protection authority.

MonHub is not intended for children under 13. We do not knowingly collect their data. If you believe a child has an account, email us and we will remove it.

If we change this policy in a way that matters, we will update the date at the top and say so in the app.

Questions, requests, or complaints: sergey@burabicasoftware.com