Privacy Policy
How MuseCards collects, uses, stores, and protects information when you use the website or mobile app.
Last updated
30 September 2026. This Privacy Policy explains how MuseCards handles information connected with the MuseCards website and mobile app.
Information we collect
When you create or use an account, MuseCards may collect your email address, a password hash, account status, and information supplied by a sign-in provider such as Google or Apple. If you use a subscription, MuseCards records the provider's customer, purchase, subscription, entitlement, and renewal identifiers needed to confirm access. MuseCards does not store your full payment-card number; payment details are handled by Stripe, Apple, Google Play, or their payment partners.
Information collected automatically
The website uses an essential session cookie to keep you signed in. The mobile app stores its session credential in secure device storage. The website may store preferences such as theme, language, currency, and local saved-state values on your device. The website loads Ahrefs Web Analytics for site measurement and may use Google Analytics for limited page-view and selected archive-interaction events when browser privacy controls do not opt out. When you are signed in on the website, MuseCards records the paths of pages you visit, linked to your account, for service support and security. Authorized site operators can review these first-party page-view logs. They do not include form entries, passwords, payment details, or URL query strings. Native mobile builds do not send account-linked page-view logs.
How we use information
MuseCards uses information to create and secure accounts, authenticate sign-ins, provide catalog and subscription access, process account and purchase-related requests, prevent misuse, maintain the service, and improve the archive. First-party page-view logs linked to signed-in website accounts help with service support and security. We use only the access information needed to apply the account and subscription rules shown in the app.
When information is shared
MuseCards may share information with service providers that help operate the service, including Google or Apple when you choose provider sign-in, Stripe for website billing, RevenueCat and the relevant app store for mobile subscription verification, and Ahrefs Web Analytics and Google Analytics for eligible website measurements. Those providers process information under their own terms and privacy policies. Marketplace and source websites receive information only when you choose to open their links; MuseCards does not sell your personal information.
Retention and deletion
MuseCards keeps account, subscription, and activity records for as long as needed to provide the service, maintain security, and meet legal or accounting obligations. Activity logs are deleted when the associated account is deleted. Where available in the app, use Account → Delete account to request deletion. Account deletion revokes sessions, removes or anonymizes the account information held by MuseCards, and does not cancel a subscription purchased through an app store or billing portal. Provider-held records are subject to the provider's retention rules.
Security
MuseCards uses reasonable safeguards for account information, including password hashing, authenticated sessions, secure device storage for native sessions, and encrypted connections where supported by the deployed service. No internet service can guarantee absolute security.
Children's privacy
MuseCards is not directed to children under 13, and MuseCards does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact the app developer using the contact details listed on Google Play so the information can be reviewed and removed where appropriate.
Changes and privacy requests
MuseCards may update this policy when the service or its data practices change. The current version is always available at https://musecards.app/privacy. For a privacy question or a request that cannot be completed through Account → Delete account, contact the app developer using the current contact details published in the Google Play listing.