Portana
Privacy policy
Last updated: 28 October 2026. The Spanish version prevails in case of discrepancy.
Who is responsible
The controller of your data in Portana is Jose Antonio Ferrete Molle, Calle Akután 6, 41012 Seville (Spain). You can contact us at [email protected] about anything related to your privacy.
What data we process
- Account: your email and password (stored hashed; we never see it).
- Profile: username, display name, profile picture if you upload one, and the city you choose.
- Approximate location: derived from the city you choose, rounded to about 1 km. Portana does not use your phone's GPS.
- Your cards: your collection, what you offer, what you are looking for and your lists, plus your search preferences (radius, minimum condition, alerts).
- Trades: proposals you send and receive, their status, any cash compensation agreed between players, and ratings between players.
- Messages: what you write in each trade's chat.
- Communities, blocks and reports: stores or clubs you join, players you block, and reports you make or that are made about you.
- Notices: the notifications we send you and, if you enable push notifications, a device identifier.
When you scan cards with the camera, the image is processed on your phone to recognise the card and is not sent to our servers.
Why we use it
- To provide the service: storing your lists, suggesting trades with nearby players, proposals, chat and alerts. Legal basis: performance of the contract you accept when signing up.
- To keep the community safe: handling reports, enforcing blocks and preventing abuse. Legal basis: our legitimate interest and that of other users.
- To send push notifications, only if you enable them. Legal basis: your consent, which you can withdraw at any time in your phone settings.
We do not sell your data, we do not use it for advertising and we make no automated decisions with legal effects on you.
What other players see
Your username, display name, picture, city and approximate distance to you, the cards you offer and want, and your ratings. Your email and exact location are never shown. Messages are only visible to the other player in the trade. If you block someone, neither of you sees the other.
Who we share it with
- Supabase (database and authentication), on servers in the European Union.
- Cloudflare, which hosts this website.
- Google Firebase Cloud Messaging, only to deliver push notifications if you enable them.
They are processors that only use the data to provide their service to us. Card images are loaded from their official sources' servers, which receive your IP address as with any image load. Reference prices come from CardMarket; none of your data is sent to obtain them.
How long we keep it
For as long as you have an account. You can delete it yourself in the app, under Settings → Delete account: your profile, cards, trades and chats are erased immediately, and open trades are cancelled with a notice to the other player. Backups that may contain your data are renewed within 30 days, except what we must keep restricted by law or to handle an ongoing report.
Your rights
You can request access, rectification, erasure (including deleting your account), objection, restriction and portability by writing to [email protected]. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Minimum age
Portana is for users aged 14 and over.
Changes
If we make significant changes to this policy, we will notify you in the app before they take effect.