PlaySmart is a search tool, not an advertising business. We don't sell your data, we don't run third-party ad trackers, and we don't set a single cookie that isn't doing a job you asked for. That's also why there's no cookie banner — there's nothing to consent to.
Last updated 6 August 2026
At a glance
The whole policy, in three lines
No cookie banner
Every cookie we set is either strictly necessary or one you turned on yourself.
Analytics without identity
Usage stats run cookieless, and no personal information goes into any event.
Signing out is total
Deleting your account ends every session and every way of signing back in, at once.
Cookies
Three cookies, all of them working
That's the complete inventory. No advertising cookies, no cross-site trackers, no fingerprinting, and nothing shared with a data broker.
Sign-in session
Keeps you signed in between visits. Set only once you have an account.
Strictly necessary
Guest session
Lets us apply the free search allowance without knowing who you are.
Strictly necessary
Theme
Remembers whether you picked light or dark, so the choice sticks.
You set this
If we ever add something outside that list, you'll get a real consent control — one where declining actually works — rather than a banner that dismisses to “accept.” We'd rather change the page than add the banner.
Analytics
What we measure
Any analytics we run are cookieless and anonymous, and the questions they answer are about the tool, not about you:
How many searches get run, and how often one comes back empty or with far too many results — the clearest signal we have that search is failing people.
Which features actually get used: bookmarks, lists, buy links.
How fast pages load and respond, measured on real devices rather than ours.
No personal information goes into any of it. If you're signed in you appear as an opaque account ID and nothing else — no name, no email, no card. If you're a guest you're not identified at all.
Your data
What's kept, and why
Your conversations. Stored against your account so your search history is there when you come back, and so a result set you found last week still resolves. We hold your ten most recent: start an eleventh and the one you have gone longest without touching is deleted, whichever day you started it.
Your saved lists. Private unless you choose to make one public. A public list has a shareable link and can be found by search engines; a private one is visible only to you.
Your account. What your sign-in provider tells us — an email address and a display name — plus your theme preference.
Nothing else. We don't ask for your address, your payment details, or your collection. Purchases happen on TCGplayer, not here, so we never see a card number.
Search without an account and none of this applies: a guest session holds a search allowance and nothing more.
Third parties
Who else is involved
TCGplayer. Buy links are affiliate links. Following one takes you to TCGplayer, where their privacy policy applies and ours stops. We're told that a purchase happened, not what you bought or who you are.
Marketplace price data. Prices are aggregated from third-party sources. That flows toward us, never the other way — no query of yours is sent to a price source.
That is the entire list. There is no ad network, no social pixel, and no session recorder. If an analytics provider is ever added, it will be named here before it runs.
Your control
Deleting your account
Deleting is immediate and it is not a “deactivation”: we end every session you have open, anywhere, and remove the link to your sign-in provider — so the account cannot be reached or signed into again, by you or by us. Your conversations and your saved lists stop being reachable at that moment, but are not yet erased from our database — that step is coming and is not built. The ten-conversation limit above does not do it for us: it only applies when you start a new conversation, and a deleted account never starts another. Until the erasure ships: nothing is kept for analytics, used to make coming back easier, or visible to a new account you make with the same address, which is a genuinely separate account. Write to us if you want it erased now and we will do it by hand.
That's everything. Nothing here should be a surprise.