Privacy Policy

1. Information We Collect

Information You Provide

• Waitlist signup: When you join the Yuki waitlist we collect your mobile number, the card you tell us you are hunting, and a record of the consent language shown to you at the time, with a timestamp. We keep that consent record because we are required to be able to show when and to what you agreed.
• Text messages: If you use Yuki, we store the messages exchanged between you and the service, along with delivery status. That history is how the service knows what you asked for and what it has already told you.
• What you ask us to watch: The cards, grades and price thresholds you set.
• Account registration: If you create a web account, we collect your email address and a password. Your password is stored as a cryptographic hash and is never stored in plain text.

Information Collected Automatically

• Analytics data: We use Google Analytics (GA4) to collect standard usage data such as page views, session duration, approximate geographic location, device type, and referral source.
• Affiliate link clicks: When you click an eBay listing link on our platform, the click may be tracked through the eBay Partner Network for affiliate attribution purposes.
• Cookies: We use cookies strictly for authentication and session management via Supabase. We do not use advertising or tracking cookies beyond those set by Google Analytics.

Information We Do Not Collect

We do not collect government-issued IDs or sensitive personal data. We do not handle or store card numbers: if and when we charge for a subscription, payment is processed by Stripe and we receive only a confirmation that payment succeeded, never the card details.

The market price data shown on the site comes from publicly available marketplace sources and involves no user data.

2. How We Use Your Information

• To run the service you asked for: watching the cards you named and texting you when one is priced the way you said you wanted.
• To send you one message when Yuki opens, if you joined the waitlist. We will not text you before that.
• To bill you, if you start a subscription, and to stop billing you when you cancel.
• To keep a record of your consent to be texted, and of your opting out, which we are required to retain.
• To analyze usage patterns and improve the service.
• To generate affiliate revenue through the eBay Partner Network when you click through to an eBay listing on the site. Affiliate links are not included in text messages.

3. Text Messages

Yuki works over SMS, which means a few things worth being explicit about.

• You start it. We only text a number that has been given to us for that purpose. Consent to receive texts is never a condition of any purchase.
• Carriers see your messages. Delivering a text necessarily involves your mobile carrier, which processes it under its own terms. We cannot deliver a message without doing this.
• Message frequency varies with how many cards you are watching and how often one comes up below market. Message and data rates may apply — that is between you and your carrier.
• Reply STOP at any time to opt out, or HELP for help. STOP takes effect immediately and permanently until you opt back in.
• Quiet hours. We do not send messages outside 8am to 9pm in your local time unless you have separately asked us to text you overnight when an auction is ending. You can withdraw that at any time.

Our messaging is delivered through Twilio, which processes your number and message content on our behalf. Twilio Privacy Notice

4. Third-Party Services

We use the following third-party services that may collect or process data:

• Twilio (Messaging): Delivers text messages and processes your mobile number and message content on our behalf. Twilio Privacy Notice
• Stripe (Payments): Processes subscription payments. Stripe receives your payment details directly; we never see or store them. Stripe Privacy Policy
• Your mobile carrier: Necessarily handles any text message sent to you, under its own terms.
• Supabase (Authentication & Database): Handles user authentication, session management, and data storage. Supabase Privacy Policy
• Google Analytics (GA4): Collects anonymized site usage data. Google Privacy Policy
• eBay Partner Network: Tracks affiliate link clicks for commission attribution. eBay Privacy Notice

We do not sell, rent, or trade your personal information to any third party.

5. Cookies

• Authentication cookies (Supabase): Essential cookies that maintain your login session. Strictly necessary and cannot be disabled.
• Analytics cookies (Google Analytics): Anonymized usage statistics. You can opt out via the Google Analytics Opt-out Add-on.

6. Data Retention

We retain your account and subscription information for as long as your account is active. Waitlist entries are retained until the waitlist closes or you ask to be removed. If you delete your account, we remove your personal data within 30 days, except where the law requires otherwise.

One exception worth stating plainly: records of your consent to receive text messages, and of your opting out, are retained after you leave. We are required to be able to demonstrate that we had permission to text you and that we stopped when you asked. That record is kept for as long as the relevant limitation period runs, and is not deleted on request.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Export a machine-readable copy of your data
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at the email below.

8. Data Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), secure password hashing, and database access controls. No method of transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date and, where appropriate, notify you by email.

Contact

Questions about your data or this policy?

Brands of Babel LLC, operating as Kanto Research
hello@kantoresearch.com