Glinto is a trading-card portfolio tracker operated by Bilal Afzal ("we", "us"). This policy covers the Glinto iOS app and the website glintoapp.com, and explains what data they handle and how. The short version: we store the collection data you create, we don't run ads, and we don't sell or share your data with anyone.
If the app crashes or hits an error, it sends a report to Sentry, our error-monitoring provider: the app version, device model, iOS version, and a technical trace of what failed. A small sample of sessions (about 1 in 10) also sends performance timings, such as how long a screen or request took. These reports contain no account details or collection data and are not linked to you. We use them only to find and fix bugs.
The card scanner uses your camera to read a card's name and number. All recognition happens on your device. Photos are never uploaded, stored, or shared — they are discarded immediately after the text is read.
If you turn on price alerts, we store an Apple push notification token for your device so we can tell you when a card on your watchlist hits your target price. The token identifies the device, not you, and is used only to deliver those alerts. Turning notifications off in iOS Settings stops them, and deleting your account removes the token. We never send marketing notifications.
Glinto Pro subscriptions are sold and processed by Apple through the App Store. We never see your payment details. So that our servers know your account has Pro, the app sends us Apple's signed record of your subscription: which plan, when it started and when it renews or ends, and Apple's transaction number. We check Apple's signature and store that record with your account. Apple also tells us directly when a subscription renews, ends or is refunded, and we update the same record. It is deleted with your account.
Glinto links to TCGplayer and eBay so you can buy a card or look it up. Some of these links may be affiliate links: if you buy something after following one, we may earn a commission, at no extra cost to you. When you follow a link you leave Glinto, and that store's own privacy policy applies; it may use cookies to credit the referral. We don't send stores your account or collection data.
glintoapp.com is hosted on GitHub Pages, which keeps standard server logs such as IP addresses. The homepage loads live market figures from our database (Supabase) and card images from TCGplayer's image servers; those requests carry nothing about you beyond what any web request does. The website sets no cookies and uses no analytics.
Your data is stored with Supabase (hosted on Amazon Web Services, US region), protected by row-level security so only your authenticated account can read it. Crash reports are processed by Sentry (Functional Software, Inc.) in the US. Market pricing data shown in the app is aggregate public sales data and is not tied to you.
You can permanently delete your account and all associated data at any time in the app: Settings → Delete Account. Deletion is immediate and irreversible — your holdings, watchlist, history, and account record are removed from our servers.
Glinto is not directed at children under 13, and we do not knowingly collect personal information from them.
If this policy changes materially, we'll update this page and the effective date above.
Glinto is operated by Bilal Afzal. Questions or requests: glinto.support@gmail.com. See also the Terms of Use.