Privacy Policy

Last updated: August 2026

What we collect

Game data. Your settings, card selections, and saved combinations are stored locally on your device's browser storage. We don't have access to this data, and it isn't sent to us.

Usage analytics. This site and the app both use Medama, a privacy-first analytics tool that we self-host — your visits never go to a third-party analytics company. Medama doesn't use cookies, doesn't collect or store your IP address, and doesn't fingerprint your browser or device. It can't identify you; it only records that a page was viewed or a button was clicked. Location is estimated from your browser's timezone at the country level only — Medama is built to never resolve city- or region-level location, by design. The app additionally sends its own anonymous usage events — like which screen you're on, game outcomes, and settings changes — over the same self-hosted infrastructure. None of this is tied to your name, and there are no accounts.

Error and feedback reports. If the app crashes, or you submit feedback through the in-app or on-site feedback form, technical details (like your browser and device info, and whatever you typed) are sent to our error-tracking provider, Sentry. Including your email in a feedback report is always optional. If the app crashes, Sentry also captures a short visual replay of the roughly 60 seconds leading up to it, so we can see what led to the problem — all text on screen is masked and all images are blocked by default, so a replay never shows what you typed or the card art you were looking at. We only ever capture a replay when something actually goes wrong; ordinary sessions where nothing crashes are never recorded.

Contact form. The Contact link in the footer sends whatever you type directly to us by email — it runs on our own Cloudflare Worker, not Sentry, so it works even if your browser blocks third-party scripts. Your message and optional email are only ever emailed to us; they aren't stored in a database or logged anywhere else. The form uses Cloudflare Turnstile to filter out automated spam before sending — this only checks that a request looks human and isn't tied to your identity. If you leave an email address, we send you a short automated confirmation that we received your message, via our transactional email provider, Resend — that confirmation includes a copy of what you sent, so you have it for reference.

What we don't do

We don't sell your data, run ads, or require an account to use Galaxy Tracker.

Third parties

• Sentry — error tracking and feedback forms.
• Cloudflare — hosts this site and the web app, delivers the Contact form's email, and runs Turnstile to filter spam on that form.
• Resend — sends the automated confirmation email when you leave an address on the Contact form.

Changes

We may update this policy as the app changes. Check back here for the current version.

Contact

Use the Contact link in the footer to reach us with privacy questions.