MapleLineCards

Privacy Policy

Last updated: July 2026

1. Introduction

At MapleLineCards, we are committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our service. MapleLineCards is designed with privacy in mind — we minimize data collection to what is strictly necessary for the Service to function.

2. Information We Collect

MapleLineCards is designed to minimize data collection to what is strictly necessary. You may use the Service without creating an account — all core features, including search, cart, and price comparison, work without any personal information. If you choose to create an account via Discord, we collect limited information to enable that feature. Specifically:

  • We do not collect names, email addresses, phone numbers, or mailing addresses
  • We do not track your browsing history or search behavior across other websites
  • We do not use fingerprinting or similar tracking technologies
  • We store an HMAC-SHA-256 keyed hash of your IP address (keyed with a server-side secret) for analytics — your actual IP address is never stored in a readable form. Hashing is one-way by design, so the stored value cannot be used to recover your address. This improves unique visitor counts over session IDs alone, which can overcount users who switch browsers or clear their storage. We also use an anonymous session identifier stored temporarily in your browser for rate limiting
  • We collect anonymous analytics on outgoing clicks — when you click a product link to visit an external store, we record the product clicked, the target store, and an anonymous session identifier. Similarly, when you proceed to checkout at a store, we track which store was chosen. This data helps us understand popular products and store preferences for potential partnerships. No personal information is collected through this tracking
  • When you use our Contact form, your email address, subject line, and message content are sent directly to us via Formspree, a third-party form handling service, solely so we can respond to your inquiry. They are not stored in our database, shared with other third parties, used for marketing, or added to any mailing list. Formspree's handling of this data is governed by Formspree's privacy policy
  • Discord Authentication (Optional): If you choose to log in with Discord, we collect your Discord user ID, display name, and avatar URL. This information is used to create and maintain your account, display your profile, and enable cross-device syncing of your wishlists and notification preferences. We do not store your Discord access token or any private Discord data beyond what is listed here
  • Wishlist Data (Optional, requires login): When you create and save wishlists while logged in, we store the product names, prices, URLs, images, and availability status of the items you add. This data is synced to our servers so your wishlists persist across devices. You can delete items or entire wishlists at any time
  • Notification Data (Optional, requires login): When you enable in-stock or price-change notifications on wishlist items, we store your notification preferences and generate alerts when stock or price changes are detected. If you enable Discord DM notifications, your Discord user ID is used to deliver those messages through our Discord bot. Notification records include the product name, price changes, and stock status
  • Location Data (Optional): The "Near Me" store filtering feature uses your browser's Geolocation API to determine your approximate latitude and longitude. This computation is performed entirely in your browser — your location data is never sent to, stored on, or processed by our servers. The result (your approximate coordinates) is used solely to calculate distances from our indexed store locations. You can revoke location permission at any time through your browser settings, and the feature will gracefully degrade to manual store selection
  • Store Location Data: We store physical addresses, coordinates, and operating flags (primary location, online-only) for indexed Canadian retailers. This data is collected from publicly available retailer listings and is used solely to calculate "Near Me" distances and display store addresses on the search page. Retailers can register multiple physical locations; the nearest one is used for distance calculations. This store location data is updated periodically via automated collection
  • Analytics data is retained for 1 year, after which it is automatically deleted. Data is aggregated per-store for reporting purposes

3. Local Storage

MapleLineCards uses your browser's local storage to persist certain preferences and session data entirely on your device. This includes:

  • Shopping cart contents (stored locally so your selections persist across page visits)
  • Wishlist data (stored locally and optionally synced to our servers when you log in to persist across devices)
  • Theme preference (light, dark, or dim mode)
  • Terms acceptance status (to avoid showing the checkout notice repeatedly)
  • Previous page path (for navigation convenience)

This data is stored on your device and is not transmitted to our servers. You can clear this data at any time through your browser settings.

4. Cookies

MapleLineCards does not use cookies for tracking or analytics purposes. We use a session cookie to maintain your login state when you choose to authenticate with Discord. This cookie is strictly functional and contains no tracking data — it simply allows our server to recognize your session for up to 30 days. No persistent cookies are set on your device.

The other browser storage mechanisms we use are the localStorage and sessionStorage APIs, as described in Section 3, which are used solely for functional purposes.

5. Third-Party Services

Our Service may link to third-party websites, including independent retailer stores. Once you leave MapleLineCards via an external link, this Privacy Policy no longer applies. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of each retailer you visit, as their practices may differ from ours. We do not share individual browsing activity with retailers — only aggregated, anonymous statistics may be used for partnership discussions.

  • Discord: If you choose to log in with Discord, Discord Inc.'s privacy policy governs the initial OAuth authentication process. We receive only the information you explicitly authorize (your Discord user ID, username, and avatar URL). If you enable Discord DM notifications, messages are delivered through Discord's platform and are subject to Discord's privacy policy.
  • Contact form (Formspree): If you submit our Contact form, your email address, subject, and message are transmitted to us through Formspree.io, a third-party form service, and are subject to Formspree's privacy policy. We do not store contact submissions in our own database.

6. Data Security

We implement industry-standard security measures to protect our infrastructure and any data stored on our servers. This includes HTTPS encryption for all communications between your browser and our servers, encrypted database storage, and restricted access to production data. For authenticated users, account information, wishlist data, and notification preferences are stored in our database and are accessible only to authorized personnel as needed for system operation and support. Search queries are processed in real-time and are not logged against user accounts.

7. Data Retention and Deletion

Anonymous analytics data is retained for 1 year, after which it is automatically deleted. Data associated with your account — including your display name, avatar, wishlists, and notification preferences — is retained for as long as your account remains active. If you wish to delete your account and all associated data, please use our contact form to submit a deletion request. Our team will process your request promptly. You may also disconnect your Discord login or delete individual wishlists at any time through the settings page, though this does not remove your underlying account data.

8. Children's Privacy

Our Service is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe that a child has provided us with personal information, please contact us and we will take steps to investigate and address the issue promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact

If you have any questions about this Privacy Policy or our data practices, please use the contact form

on our website.