Last updated: March 9th 2026

This privacy notice describes how Creative Collectible Company LLC (“we,” “us,” “our”) collects, uses, and shares your personal data as a user of the Sorted application (the “App”).

We collect and process the following categories of personal data, depending upon how you interact with the App:

This includes your account ID, email address, and authentication credentials.

If you use a social media login (e.g., Facebook/Meta, Apple, or Google) to authenticate to the App, we will receive the profile information that you authorize the social media login provider to share with us, such as your name and email address.

This includes things like your operating system and version, your IP address, your device type and identifiers, app usage data, and interaction logs.

This includes information you choose to share through the App about the games and cards you own or are interested in.

The App allows you to identify and obtain information about cards you own by using your device’s camera. This may be done by using the App’s built-in scan engine (which does not capture a photo) or a third-party identification service provider acting on our behalf, to whom we will transmit a photo file for identification. The photo is used solely for the purpose of identifying the card and is not retained by us or our service provider beyond the time reasonably necessary to complete the identification.

The App allows you to identify and obtain information about cards you own by using your device’s camera. This may be done by using the App’s built-in scan engine (which does not capture a photo) or a third-party identification service provider acting on our behalf, to whom we will transmit a photo file for identification. The photo is used solely for the purpose of identifying the card and is not retained by us or our service provider beyond the time reasonably necessary to complete the identification.

If you subscribe to our premium service in the App, payment for that subscription will be processed through the relevant app store (e.g., the Apple App Store or Google Play Store). When you subscribe, we send a hashed version of your user identifier to a third party to facilitate the subscription transaction. We do not have access to your full payment details for the app store.

If you choose to opt in to receive marketing emails, we collect your email address and marketing preferences for this purpose. Your information is entered into our third-party email marketing system, which we use to manage email marketing subscriptions and collect engagement metrics (such as open rates and click-through rates).

The App is intended to consolidate similar functionality offered by multiple game-specific mobile applications we have published. If you have an account on another one of our Dragon Shield mobile apps (e.g., MTG Scanner, Poké TCG Scanner, YGO Scanner, FaB Scanner), information you have provided in those Dragon Shield apps will be migrated automatically to the App when you log into the App using your Dragon Shield credentials from those apps.

We do not process special categories of personal data (sensitive personal data) about you when you use the App.

We limit our collection, storage, and processing of personal data to situations where it is necessary for a specific purpose.

Our purposes for processing your personal data and the associated legal bases for processing are set forth in the table below.

Where we rely on legitimate interests, we have conducted a balancing assessment and determined that our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interests, as described below.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements, including the following:

• Account and collection data: Retained for as long as your account is active. Upon account deletion, data is removed in accordance with our deletion procedures, subject to any legal retention obligations.
• Photos for collectible identification: Retained only for the brief period necessary to complete the identification process, then deleted.
• Purchase and order data: Retained for as long as required to fulfill the order and comply with legal obligations (e.g., tax and accounting records).
• Subscription data: Retained for the duration of your subscription and for a reasonable period thereafter for administrative purposes.
• Device and technical data: Retained for a reasonable period for diagnostic and security purposes.
• Customer support records: Retained for a reasonable period to resolve and follow up on support requests.

We may disclose your personal data as follows:

• Among our corporate affiliates and subsidiaries, as appropriate for the purposes set forth above.
• To business partners and service providers to support our business purposes, as described above.
• Where required by law or legal process, to enforce or protect our rights under the law, or where otherwise appropriate and permitted by law to prevent harm, loss, or suspected illegal activity.
• In the context of an actual or prospective business transaction involving all or part of our company, including mergers, acquisitions, consolidations, or divestitures.

When we engage service providers to process your personal data, we use contract terms that require those providers (i) to process your personal data only on our behalf and in accordance with our instructions; and (ii) to protect the confidentiality and security of your information.

The categories of personal data that we may disclose in any of these scenarios will vary depending upon what is necessary in a given scenario, but may include any of the categories of information described above.

We do not sell your personal data, and we do not share your personal data for cross-context behavioral advertising purposes, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or other applicable privacy laws.

We do not engage in targeted advertising using third-party advertising networks. The advertisements displayed within the App are our own first-party ads promoting our products and services and those of our partners.

Your personal data may be transferred to and processed in countries outside of your country of residence, including the United States and other countries that may not provide the same level of data protection as your home country.

Where we transfer personal data outside the European Economic Area (EEA) or the United Kingdom (UK), we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions or UK adequacy regulations recognizing the receiving country as providing adequate protection;
• Standard Contractual Clauses (SCCs) approved by the European Commission and/or the UK International Data Transfer Addendum, as applicable;
• Other valid transfer mechanisms as permitted under applicable law.

You may request a copy of the safeguards we use for international transfers by contacting us at support@tcgsorted.com.

The App is not intended for, and should not be used by, individuals under the age of 18. We do not knowingly collect personal data from children under 18.

The security, integrity, and confidentiality of your information are extremely important to us. We have implemented appropriate technical, administrative, and physical security measures designed to protect your personal data from unauthorized access, disclosure, use, and modification. These measures include encryption of passwords, secure transmission of data, and access controls limiting who can access personal data.

Although we regularly review our security procedures and evaluate new technology and methods to make the App and its supporting technologies safer, no security measures are perfect or impenetrable. We cannot guarantee absolute security of your information.

The App may use cookies, local storage, or similar technologies for essential functionality such as maintaining your login session and remembering your preferences. We do not use third-party tracking cookies or cross-site tracking technologies. No third-party advertising trackers are used in the App.

The App integrates with certain third-party services as described above. When you choose to use social login through Facebook/Meta, Apple, or Google, or when you use the App to visit a third-party website (such as to purchase a card), your interactions with those platforms are governed by their respective privacy policies. We encourage you to review the privacy practices of any third-party service before using it.

Depending upon where you reside, you may have certain rights related to your personal data, including rights to access, correct, limit use or disclosure, data portability, and, in some cases, request deletion of your personal data or object to the manner in which it is processed. In some cases, we may limit or deny your request to delete your personal information if the law permits or requires us to do so, or if we are unable to adequately verify your identity.

If we rely on your consent to lawfully and fairly use your personal data, you may withdraw your consent at any time.

We will not discriminate against you for exercising your lawful privacy rights. You will not ordinarily have to pay a fee to exercise the rights you may have. However, we may charge a reasonable fee if your request is unfounded or excessive.

In most cases, you can exercise your rights directly through the App. This includes:

• Accessing your personal data using the account settings in the App,
• Deleting your personal data via the account deletion feature within the App, and
• Opting out of marketing emails, which can be done using the preference settings in the app or by clicking the unsubscribe link in any marketing email.

If, for any reason, you are unable to exercise your rights adequately using the App or otherwise need assistance, please contact us at support@tcgsorted.com or submit a request using our support form at https://app.formcrafts.com/sortedsupport. We will respond to verified requests within the timeframes required by applicable law.

If you seek to exercise your rights outside of the App, we may need to verify your identity before fulfilling your request. We will not require you to create an account solely for the purpose of verifying your identity.

If you are in the European Economic Area (EEA) or the United Kingdom, you have the right to lodge a complaint with a supervisory authority in your country of residence. You may have similar rights in other jurisdictions, depending upon where you reside.

If you have any questions, complaints, or requests relating to this Notice or our information handling practices, you can email us at support@tcgsorted.com  or submit a request using our support form at https://app.formcrafts.com/sortedsupport.

We may update this Notice from time to time to reflect changes in legal requirements or operational practices, or due to other factors. When required by applicable law, we will notify you of such changes to this Notice by posting a notice on this page before any changes take effect or in another appropriate manner. You can see when this Notice was last updated by checking the “Last Updated” date displayed at the top of this Notice.

This section provides additional information required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

In the preceding 12 months, we have collected and disclosed for business purposes the following categories of personal information, as defined under the CCPA/CPRA:

• Identifiers (e.g., account ID, email address, name, IP address)
• Commercial information (e.g., purchase history, order details)
• Internet or electronic network activity (e.g., device information, operating system, App usage data)
• Geolocation data (derived from IP address; we do not collect precise geolocation)

In addition to the rights described above, California residents have the right to request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share personal information. Those rights can be exercised as described above.

A properly authorized agent may be able to exercise California privacy rights on your behalf. Authorized agents must contact us at support@tcgsorted.com and indicate that they are submitting the request as an agent. We reserve the right to require the agent to validate their identity and to demonstrate authority to act on your behalf by providing signed permission from you. We may also require you to verify your own identity directly with us or to confirm with us that you provided the authorized agent permission to submit the request on your behalf.