Loading…
Loading…
This policy explains how Awaited Developments, the operator of SummonHub, collects, uses, and shares personal information when you use summonhub.com, the SummonHub Android app (com.awaiteddev.summonhub), and our related services.
Last updated:
We use information to create and secure accounts, sync your content, display and value collections and decks, verify subscriptions, provide requested notifications, answer support requests, diagnose errors, and protect against fraud and abuse. Optional website analytics helps us understand feature use and improve SummonHub. Advertising supports the Android app's free features.
Where applicable privacy law requires a legal basis:
Providing account details and content for cloud features is necessary to use those features. You can browse public website content without an account and with optional website analytics off.
Necessary browser storage supports sign-in, security, and preferences. Our __session sign-in cookie lasts up to 14 days. Firebase also stores authentication state in your browser. Local storage remembers preferences such as list views and your analytics choice. Blocking this storage may prevent sign-in or stop preferences from being remembered.
Google Analytics through Firebase loads only after you choose Allow in the website analytics notice or turn on Usage analytics in Analytics preferences in the footer. By enabling it, you consent to usage measurement and confirm you are at least 16. Declining, browsing, creating an account, or accepting our terms does not enable it.
When enabled, analytics sends page categories, feature events and counts, referral/campaign categories, browser/device information, and cookie identifiers to Google. If you are signed in, we also send your internal account ID to connect activity to your account. This is pseudonymous measurement, not anonymous data. Our website analytics events exclude email addresses, display names, search text, private deck and collection names or contents, imported files, and full merchant URLs.
Google processes IP addresses to derive approximate location; GA4 does not log or store those IP addresses. This is separate from the login and security information SummonHub and its hosting providers process. See Google Analytics data safeguards.
Analytics uses first-party _ga and _ga_* cookies. We configure them to expire after 90 days without extending their expiry on each visit. Browser rules may expire them sooner. Our website integration disables advertising storage, advertising personalization, and Google Signals.
You can turn Usage analytics off at any time in the footer. This stops future website analytics collection and removes this site's Google Analytics cookies. It does not automatically delete previously collected information. Your choice applies to this browser, rather than to every device or the Android app.
Card scanning. Camera permission lets the app recognize card names and numbers. The current scanner processes camera frames on your device using Google ML Kit; it does not upload those frames to SummonHub. Cards you choose to save may be stored locally or synced to your account.
Notifications. Firebase Cloud Messaging registers this app installation to deliver remote service messages, app announcements, and promotions on the default notification channel. Local price alerts are generated by the app's price-watch feature on its separate price-alert channel and do not require remote messaging registration. Manage either channel through Notification settings in App Settings. If you disable app notifications or the default channel, the app requests removal of its remote messaging registration the next time it checks your notification settings. This may require an internet connection. Allowing notifications does not enable analytics.
Usage analytics. Firebase Analytics records app screens and feature interactions, device/app identifiers, and account and subscription categories. App events can also include public card identifiers and names, and deck-sharing categories. Private deck identifiers and names, account IDs, notification identifiers, and raw errors are excluded from app analytics.
Crash reports. Firebase Crashlytics sends crash details, device and app information, and an installation identifier so we can investigate app crashes. We do not attach your account ID to crash reports.
One choice, Usage analytics & crash reports, covers both. Where prior consent is required, including the EEA and UK, it stays off until you agree through the app's privacy form; agreeing to analytics there also covers crash reports. Elsewhere, it may be on by default where permitted, after the app checks the applicable privacy requirements. If the app cannot confirm that this is allowed, it stays off.
You can turn it off at any time in App Settings. Your choice is remembered and takes precedence over the regional default. Turning it back on still requires any necessary consent; use Privacy options when available to change those choices. Advertising-related analytics features and collection of advertising IDs are disabled. AdMob ads have separate privacy controls, described below.
Turning it off stops analytics collection immediately; automatic crash reporting stops by the next app launch. Crash information may still be stored on your device while reporting is off. We attempt to remove pending reports, but cannot guarantee immediate removal of all local reports. Turning it off does not delete information already sent. This Android setting is independent of your website analytics preference; changing one does not change the other.
Advertising. Google AdMob and its ad providers may process IP addresses, device and advertising identifiers, approximate location, and ad interactions to deliver, measure, personalize, and protect ads. Personalization depends on your choices and applicable requirements. The app uses Google's consent messaging and offers Privacy options in App Settings when required by that system. You can also manage advertising ID controls in Android. See how Google uses information for advertising.
We keep account and saved content while your account is active to provide the service. Other information is kept only as long as needed for the purposes described here, including security, support, and legal requirements. Different providers have their own retention settings; the website's 90-day analytics cookie lifetime does not set the retention period for analytics events held by Google. We assess retention based on the type of data, whether it is still needed to resolve a support or security issue, and applicable legal requirements. Google documents a 90-day retention period for Crashlytics reports and associated identifiers before removal from live and backup systems begins; other Firebase products follow different schedules. See Firebase privacy and retention information.
To request deletion, choose Delete account in your website profile or Android profile settings and complete the identity confirmation. Requests start a 30-day grace period and sign you out. Signing back in during that period automatically cancels deletion. After the period expires, a daily cleanup performs permanent removal of your authentication account and associated cloud profile, collections, decks, and subscription records.
You can also email support@summonhub.com to request deletion without installing or signing into the app, or without the 30-day recovery period. Tell us if you want to waive recovery. We will verify ownership and handle the request under applicable law; cloud cleanup and provider follow-up may take time. Never send us your password.
Account deletion does not automatically cancel Google Play billing; cancel your subscription through Google Play separately. The automated account cleanup removes your authentication account and account-scoped cloud data; it does not itself delete information in separate analytics, diagnostics, or support systems. For information in those systems, contact us so we can address the request with the relevant provider, subject to identity verification and applicable legal exceptions. We may retain limited records needed for security, fraud prevention, or legal obligations and will explain an applicable exception when responding to your request. Provider backups and independently held transaction records follow their own deletion schedules.
Copies you or recipients exported are outside the automated cleanup. Clear app/browser storage to remove local copies. Abandoned signups that remain unverified or have not accepted terms are eligible for cleanup after seven days.
You can update available profile details, edit or remove saved content, export collections and decks, change website analytics preferences, manage the Android usage analytics and crash reports choice, notification permissions and ad privacy options, and request account deletion.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, withdraw consent, restrict or object to processing, or opt out of certain advertising uses. Contact us to exercise these rights; we may verify your identity before responding. We will respond as required by applicable law and explain any applicable exceptions. You may also raise a concern with your local privacy or data protection authority, including the Office of the Information and Privacy Commissioner for British Columbia where applicable. Withdrawing consent does not affect processing that was lawful before withdrawal. We do not deny service merely because you exercise privacy rights; some features require the information needed to provide them.
We use encrypted connections, authentication, access restrictions, and app integrity controls to protect information. No internet service or storage system can guarantee complete security.
Our service providers may process information outside your country, including in the United States, where privacy laws may differ and local authorities may have lawful access. Where required, transfers must use applicable contractual or other legal safeguards. Contact us for information about the safeguards that apply to your data.
SummonHub is not directed to children under 13. Our Terms of Use set out additional eligibility requirements for accounts. Optional website analytics is available only to visitors who confirm they are at least 16. This 16+ declaration applies specifically to website analytics cookies, separately from account eligibility. Android usage analytics and crash reports follow the regional privacy choices described above. Account eligibility does not grant analytics or advertising consent. We do not collect a date of birth for the website declaration. Declining analytics leaves the service available. If you believe a child has provided personal information contrary to those requirements, contact us so we can investigate and remove it as appropriate.
We will post updates here with a revised date. For material changes, we will provide additional notice and obtain consent where required by applicable law. A policy update or continued use does not replace any required consent or override a saved refusal. Website analytics requires its optional choice; Android usage analytics and crash reports follow the regional controls described above.
For questions about this policy or requests about your personal information, contact Awaited Developments, operator of SummonHub, at support@summonhub.com. Include enough detail to identify your request and the account concerned, but do not include passwords or full payment details.