Privacy

What Pack One stores

Pack One keeps the information needed to run the game and remember your progress. On the website, that includes first-party cookies for player and account sessions and request security, plus browser storage for guest identity, game history, preferences, Daily history, and temporary product or sign-in flow state. Guest play is tied to a Pack One player identifier so progress can continue across visits. If you later sign in, eligible guest progress is merged into the account under Pack One’s existing ownership rules.

In the iPhone, iPad and Android apps, sign-in sessions, in-progress shared runs, and similar recovery state are kept in device secure storage. Gameplay records, account-linked progress, memberships, and other server-backed features are stored by Pack One’s backend services.

Accounts and sign-in

Accounts are optional. You can sign in with an email address and password, with Google, or with Sign in with Apple. Pack One stores your account email address, the display name you choose, and the sign-in methods linked to the account. Pack One does not receive your Google or Apple password.

Google sign-in shares your email address, name, and basic profile information with Pack One’s sign-in service. Sign in with Apple shares an email address, which can be an Apple private relay address if you choose to hide your email, and, on the first sign-in, the name you choose to share. For Sign in with Apple, Pack One also stores the Apple account identifier and an encrypted Apple token used to revoke Sign in with Apple when you delete the Pack One account.

Email/password signup requires email verification. Pack One also sends account emails for verification, password recovery, deletion verification where applicable, and certain account notices. The email-delivery provider receives the destination address and message data needed to deliver those emails.

Optional Daily reminders

Daily reminder emails are off by default and are sent only after you turn them on in Account settings. Pack One sends at most one reminder email a day and skips days you have already finished all three Dailies. Reminder emails go only to the verified email on your Pack One account and include unsubscribe and management links. In the Pack One mobile app, device notifications are a separate choice that also needs device permission and uses a device-specific push token. Granting email consent does not grant push consent.

To deliver reminders, Pack One stores your reminder choices and when you made them, a minimal change history, delivery attempts and provider receipt states, and, for the mobile app, device registrations with protected push tokens. Resend receives the verified email and email contents for reminder emails; Expo and device push providers handle native notification tokens and message content. A provider accepting a message does not guarantee its appearance or delivery. Bounce and complaint events can turn off email reminders.

Pack One removes reminder preferences, send records, and device registrations when your account is deleted. Delivery records are otherwise kept for up to 90 days, change history for up to 365 days, and revoked device registrations for up to 30 days; cleanup runs with the daily reminder job. Bounce and complaint suppression fingerprints remain until account deletion to honor delivery restrictions. Changing accounts or signing out revokes the corresponding device registration. Unsubscribing from email does not affect push. A message already handed to an email or device provider cannot be recalled. Pack One does not sell reminder destinations or publicly report individual reminder activity.

Gameplay, analytics, and decision reports

Pack One stores gameplay inputs and results needed to score runs, preserve progress, show history, support Daily leaderboards, and operate account features. Pack One also records product events such as page views, game starts, reveals, challenge opens and completions, shares, and outbound commerce clicks so it can understand whether the product works and where players stop in the experience.

Analytics use a Pack One player identifier and a random browser-session identifier to understand repeat play. Gameplay properties are allowlisted; email addresses, passwords, auth tokens, and raw page URLs are not included in product events. Campaign tags may be recorded, and when no campaign source is present Pack One may record only the referring site’s hostname, not its path or query.

If you use Report this decision, Pack One stores the selected reason, optional comment, the reported decision and run context, scoring/corpus/release context, client platform/version/build when available, a timestamp, and the existing Pack One player identifier. Decision reports do not include email addresses, passwords, or auth tokens. If the associated player record is deleted, a report may remain without that player identifier so product-quality evidence can still be reviewed in aggregate.

Profiles and shared challenges

Profiles are private by default. Publishing requires an account and an explicit choice. Public profiles show the display name, game record, and selected career details; they exclude email and account/session identifiers. Private profile shares link to the general site. Creating a friend challenge makes its display name, score, and the run’s final packs available to anyone with that challenge link. Do not put sensitive personal information into a display name.

Memberships and subscriptions

Connecting Patreon stores the provider account and membership identifiers, current campaign and tier entitlements, membership and charge status, and connection and synchronization times. These records link benefits to your Pack One account. Pack One does not store your Patreon password or Patreon OAuth access token. Disconnecting removes the provider link and Patreon benefits without deleting your Pack One account or game history.

When you subscribe to Pack One Elite through Apple, Pack One stores App Store subscription transaction identifiers, product identifier, environment, expiration and renewal state, and the Pack One account identifier supplied to StoreKit as the app account token. Pack One verifies Apple-signed transaction and server-notification data before granting Apple-provided access. Apple handles payment details; Pack One does not receive your full payment-card information.

Advertising and commerce links

Google advertising is currently disabled, so Pack One does not currently load Google display ads. While Google advertising is disabled, the Daily home can show a TCGplayer affiliate promotion to visitors who are eligible to see advertising.

TCGplayer links are routed through Impact. The Daily-home promotion uses a logo image served by Pack One; merely viewing it does not load a TCGplayer or Impact script or tracking pixel. Pack One records outbound TCGplayer clicks, including the card, set, page surface, and affiliate-routing status. Purchases and payment details are handled by TCGplayer and its partners, not by Pack One.

Pack One apps

The Pack One apps use the same Pack One accounts and backend services as the website, so the rest of this page applies to them. The apps do not include third-party analytics, advertising, or crash-reporting SDKs. When you play, the apps send picks and run results to Pack One’s servers for scoring and recordkeeping, and the servers record gameplay events linked to the Pack One player identifier.

Connecting Patreon from the apps opens Patreon in your browser. The apps’ Daily home can show the TCGplayer promotion to players who are eligible to see advertising, and TCGplayer links open in the browser through the same Impact affiliate routes. The apps do not separately record those outbound clicks. Apple subscriptions are offered only in the iOS app.

Third-party services and email delivery

Pack One uses third-party services where needed to provide the product: Google and Apple for optional sign-in, Patreon for connected membership, Apple for iOS subscriptions, Resend for transactional account email delivery, Scryfall for card images, and infrastructure providers for hosting, authentication, databases, and related operations. Card-image requests can be made to Scryfall from your device. When you follow a link to an external service, that service applies its own privacy practices.

Retention and deleting your account

Pack One keeps ordinary account and gameplay records to provide account features, saved history, leaderboards, and product operations. Account deletion removes attributable data as described below. Short-lived verification, sign-in, and similar technical records expire or are removed through cleanup processes.

For supported sign-in methods, Account settings lets you permanently delete your Pack One account after fresh verification. Password accounts use the current password. Accounts without a password use a short-lived one-time code sent to the verified email address already associated with the account; Pack One does not ask the browser to choose the destination. Sign in with Apple accounts may be asked to verify with Apple instead.

Deletion removes attributable Pack One data including the account/player record, public profile, leaderboard entry, individual gameplay and career history, and linked Patreon, Apple-subscription, and other account associations. Deleting a Pack One account does not cancel an Apple App Store subscription; Apple subscriptions must be managed or canceled through Apple. Genuinely aggregate or otherwise non-attributable statistics may remain where applicable.

Deletion normally completes immediately. If identity-provider completion is temporarily unavailable after deletion has committed, Pack One signs you out and finishes the irreversible operation through server-side recovery. No further user action is required, and the deletion cannot be canceled after it enters the committed pending state.

Your choices and contact

You can play without an account, choose whether to publish a profile, disconnect Patreon, sign out, and use Account settings to request account deletion. In the apps, open Account settings and choose Delete account. If you cannot complete deletion in the app or Account settings, email admin@packone.pro from the email address associated with the account; Pack One may require verification before acting on the request.