Privacy policy
Last updated: 23 Oct 2026
This policy explains what personal data PackAlert collects, why, who it is shared with, and your rights under Israel's Protection of Privacy Law, 1981. You are not legally required to give us any data, but an account needs an email address and a password, and some features need more. The Hebrew version prevails.
Who is responsible
The database owner is Pack Alert. Privacy questions and requests: info@synca.co.il.
What we collect
- Account: your email address and password (stored only as a hash, never as text).
- Public profile, if you create one: a nickname, and your city if you choose to show it. Your email and your collection's value are never shown to others.
- Settings: language, time zone, display currency, digest hour, the Telegram chats you connected, and the devices you allowed notifications on.
- What you keep in the service: followed products, store links, target prices, alert history, your collection, your "looking for" list and purchase records in a shared space.
- The sale & trade board: your listings and their photos (location and device data in the photo is removed on the server), the contact details you choose to give a seller, reports and blocks.
- Card photos for scanning: sent for recognition and not kept by us.
- Technical data: your IP address is used briefly to block break-in attempts and is not stored permanently. We use no analytics or advertising tools.
Why we use it
- to run the service: stock and price checks, alerts and digests, your collection and shared spaces;
- to connect buyers and sellers on the board, and to handle reports and abuse;
- to secure the service and stop break-in attempts;
- to contact you about your account or changes to the service.
We don't sell personal data and don't use it for advertising.
Who we share it with
- Members of a shared space see the space's packs, alerts, collection and purchase records, and your nickname.
- Your nickname, your city (if you chose to show it) and your listings on the board are visible to everyone, including visitors.
- The contact details you give when interested in a card are revealed only to the seller's space.
- Providers that help run the service: Anthropic (recognising cards in photos and products on store pages), Telegram (alerts to the chats you connected) and the browsers' notification services (Google, Apple, Mozilla, Microsoft). These providers also operate outside Israel, mainly in the United States.
- Authorities, when the law requires it.
Cookies and browser storage
We use one cookie that keeps you signed in (up to 30 days), and browser storage to remember your language. The app installs a service worker so it can work as an app and receive notifications.
The pages load fonts from Google Fonts and product images from TCGplayer, so their servers receive your browser's IP address.
How long we keep it
Account data is kept while the account exists. A board listing expires after 30 days unless renewed. When an account is deleted, its data is removed from the service; backup copies are deleted in the normal backup cycle.
Security
The connection is encrypted (HTTPS), passwords are stored as hashes, and the sign-in cookie can't be read by scripts. No system is perfectly secure; if a breach happens we will act as the law requires.
Your rights
You may ask to see the data we keep about you, to correct it or to delete it, and to delete your account. Send the request to info@synca.co.il from the address on your account. If we don't answer, you may contact the Israeli Privacy Protection Authority.
Minors
The service is meant for people aged 13 and over, and we don't knowingly collect data about children under 13. If we learn of such an account, we delete it. A parent or guardian may ask to see or delete their child's data by writing to info@synca.co.il.
Changes to this policy
We may update this policy. The date at the top shows when it last changed, and we will announce a material change on the site or in the app.