Privacy Policy
Last updated: 13 February 2026
1. Overview
SorcStash ("the Service") is operated by Mystweave ("we", "us", "our"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
We take your privacy seriously and only collect data that is necessary to operate the Service.
2. Data We Collect
Account Data (via Clerk)
When you create an account, authentication is handled by Clerk. We receive and store your Clerk user ID to associate your data within SorcStash. We do not directly store your email address, password, or other authentication credentials - those are managed by Clerk.
Collection Data
Cards you add to your stash, decks you build, trade posts you create, and messages you send are stored in our database and associated with your Clerk user ID.
Subscription Data
If you subscribe to the Sage tier, payment processing is handled by Stripe. We store your Stripe customer ID and subscription status. We do not store credit card numbers, bank details, or other payment credentials.
Usage Preferences
We store your preferred currency (USD/AUD) and stash sharing settings. Currency preference is also stored locally in your browser via localStorage for guest users.
Automatically Collected Data
Our hosting provider (Cloudflare) may collect standard web server logs including IP addresses, browser type, and pages visited. This data is managed by Cloudflare under their Privacy Policy.
3. How We Use Your Data
We use your data to:
- Provide and operate the Service (collection tracking, trading, messaging)
- Process subscription payments via Stripe
- Display your public stash to other users (only if you opt in)
- Improve the Service and fix bugs
We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as described in this policy (Clerk for auth, Stripe for payments, Cloudflare for hosting).
4. Cookies and Local Storage
SorcStash uses cookies set by Clerk for authentication purposes. We also use browser localStorage to store your currency preference.
We do not use advertising cookies, tracking pixels, or analytics services that profile your browsing behavior.
5. Data Storage and Security
Your data is stored on Cloudflare's infrastructure (D1 database and R2 storage). Data is encrypted in transit via HTTPS. We implement reasonable security measures to protect your data, but no system is 100% secure.
6. Third-Party Services
We use the following third-party services:
- Clerk - Authentication and user management (Privacy Policy)
- Stripe - Payment processing (Privacy Policy)
- Cloudflare - Hosting, database, CDN (Privacy Policy)
Each service has its own privacy policy governing how they handle data. We encourage you to review them.
7. Your Rights
You have the right to:
- Access your data - your collection, decks, and trades are visible in your account
- Export your data - you can export your stash as CSV at any time
- Delete your data - you can clear your entire stash, delete trades, and delete messages
- Account deletion - you can delete your account through the user icon in the top-right corner of the site via Clerk
If you are located in the EU (GDPR), UK, California (CCPA), or Australia, you may have additional rights under applicable privacy laws. Contact us to exercise these rights.
8. Children's Privacy
SorcStash is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance of the updated policy. We will make reasonable efforts to notify users of significant changes.
11. Contact
Questions or concerns about your privacy? Contact us at support@mystweave.com.