Privacy Policy

Last updated: May 15, 2026

Who we are

Cromos 26 ("we", "us", "our") operates this mobile app and website. We are an independent collector tools provider. We are not affiliated with, endorsed by, or sponsored by FIFA, Panini, or any other sticker manufacturer. All trademarks are property of their respective owners.

For privacy questions: stulanik@gmail.com

What data we collect

Account data: email, password (hashed by Supabase Auth), optional username.
Album state: which stickers you own / need / have duplicates of. Stored per-user so you can use the app on multiple devices.
Orders: if you buy physical sticker packs, we collect delivery name, phone, address, and the order line items.
Technical data: device type, OS version, crash logs, IP address (for rate limiting and abuse prevention).
Authentication tokens: stored encrypted on your device (Keychain on iOS, EncryptedSharedPreferences on Android).

Why we collect it

To run your account and let you sign back in.
To sync your album across devices.
To match you with other users for sticker trades (only your username and aggregated extras/needed counts are shared, never your email or address).
To process and ship orders you place.
To diagnose crashes and improve the app.

Third parties we share data with

Supabase (EU) — database + authentication infrastructure.
Render (US) — API server hosting.
Vercel (US) — web app + admin panel hosting.
Expo / EAS (US) — mobile build pipeline.
Mercado Pago (LatAm) — payment processing for online orders (handles card data; we never store card numbers).

We never sell your data, and we don't use it for advertising. We don't share data with FIFA, Panini, or any third-party advertiser.

How long we keep it

Account + album: as long as your account exists. If you delete your account (Settings → Delete account in the app), we permanently wipe all your data within 30 days. Orders: kept for 5 years for tax compliance, then deleted.

Your rights

Access: request a copy of your data by emailing us.
Correction: change your username/email from inside the app.
Deletion: use the in-app "Delete account" button in Settings, or email us. Deletion is immediate and irreversible.
Portability: request export of your album in JSON via email.

Children

The app is intended for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will delete it.

Changes

We may update this policy. The "Last updated" date above will change when we do. Significant changes will be announced in-app.

Contact

stulanik@gmail.com