Privacy Policy

Last updated: October 24, 2026

This Privacy Policy explains how Dcipher LLC collects, uses, shares, and protects information when you use Autoqueue, including the website, dashboard, email alerts, and browser extension, optional SMS alerts, and the CardCheck iPhone app.

CardCheck

  • When you grade a card, we store the photos you take (front, back and the four corners) privately with your submission, along with the centering lines you confirm or adjust and the resulting report.
  • Before your first grade, the app asks your permission to send card photos to a third-party AI service. If you continue, we send prepared copies of your photos to that service to produce your report. Under our agreement, the service does not use them to train its own models. It may keep copies for a limited time under its own policies, generally up to 30 days and longer for content its safety systems flag. We do not promise immediate deletion at the provider. Your choice is saved on that iPhone for your account; a new iPhone asks again.
  • We keep the photos you submit, and the reports made from them, and may use them to develop and improve our grading. We do not use them for advertising and do not sell them.
  • Deleting a report removes its photos and results from our storage. Cleanup runs in the background. Improvements to our grading already made with those photos are not undone, and copies already held by the AI service follow its retention described above.
  • Collections organize your reports. If you add a professional grade, we store the grading company, grade and optional certificate number with that report to show your comparisons and aggregate comparisons by company and grade. These entries are self-reported and not verified. Deleting the report or your account removes them. Files you export and share stay wherever you send them.
  • If you turn on report notifications, we store a device push token and your preference for that app installation and use Apple's push notification service for updates without card details. You can turn this off in the app or in iPhone Settings.
  • The app uses Apple's App Attest to confirm requests come from a genuine copy of the app. We store the key identifier Apple issues for your installation.
  • For plans bought in the app, we receive and store Apple's purchase records for your account: the product, purchase and renewal dates, status and the original transaction identifier. For plans bought on the website, our payment processor handles payment details; we store customer and subscription identifiers. We do not store card numbers.

Information We Collect

  • Account information, such as your email address, account status, selected plan or tier, email alert preferences, and administrative account notes.
  • SMS information if you choose to opt in, including your mobile phone number and the date and time you gave SMS consent for live alerts, upcoming drop announcements, and scheduled reminders. Saving a phone number by itself does not enroll it in SMS alerts, announcements, or reminders.
  • Authentication and security information, such as password hashes, two-factor authentication setup data, session records, IP address, browser user agent, and security logs. We do not store your raw password.
  • Extension authentication information, including your Autoqueue access key and a generated extension install id. The extension stores the key and install id locally in your browser. The bridge receives them to authenticate the connection, validates the key, and uses the install id to bind the key to one browser install at a time.
  • Service activity, such as whether a connection authenticated, whether an alert was sent, whether a queue signal matched, and whether a browser switch was used. Logs use user ids or token ids where practical rather than raw secrets.
  • Delivery timing measurements, such as when an alert was first sent to a connected browser and when an alert email was accepted by our email provider. We use these to measure service performance, and we publish them only as aggregate statistics across accounts, never as your individual activity.
  • Email delivery information from our email provider, such as delivery, bounce, and failure status for Autoqueue service emails.
  • Billing information if paid billing is enabled. Payment details are handled by our payment processor. We do not store full payment card numbers.

How We Use Information

  • To create and secure your Autoqueue account.
  • To approve, disable, revoke, or reset access to Autoqueue features.
  • To authenticate the browser extension and enforce one active device binding for queue access.
  • To send queue-live alerts, including optional transactional SMS live alerts, upcoming drop announcements, scheduled reminders, account emails, and service updates.
  • To operate, debug, protect, and improve Autoqueue.
  • To prevent abuse, key sharing, fraud, unauthorized access, and activity that would violate Autoqueue's compliance boundary.

Browser Extension Data

  • The Autoqueue extension is a local actuator. It stores your access key, generated install id, connection status, and minimal local settings needed to connect.
  • The current extension connects only to the Autoqueue bridge origin at https://queue.autoqueue.app under its browser manifest. The connection uses WebSocket over TLS. The access key is sent in the first auth message, never in a URL query string.
  • When Autoqueue detects a queue-live signal, the bridge sends one or more approved retailer URLs to the extension, and the extension opens them in browser tabs. Your dashboard tab style setting controls browser delivery: either available product pages assigned or confidently matched to the alert, including a different product matched later in the same retailer event, or one official store tab for the whole retailer event.
  • The current extension requests storage, alarms, and access to the Autoqueue bridge origin. It does not request the tabs permission, inspect tab metadata, read browsing history, read page contents, or request access to retailer hosts. It uses the browser's standard tab and window creation APIs to open a validated URL.
  • The extension does not solve captchas, bypass queues, automate checkout, scrape retailer pages, or act on your behalf on a retailer site.

How We Share Information

  • We do not sell personal information.
  • We may share information with service providers that help us run Autoqueue, such as hosting, database, email and SMS delivery, analytics, authentication, and payment providers.
  • We do not share your mobile phone information, SMS opt-in data, or SMS consent status with third parties for promotional or marketing purposes. We may share those details only with providers that help deliver and operate the Autoqueue SMS program.
  • We may disclose information if required by law, to protect rights and safety, to investigate abuse, or as part of a merger, acquisition, financing, or sale of assets.
  • We do not share your access key with retailers.

Data Retention

  • We keep account and service records for as long as needed to operate Autoqueue, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.
  • We may retain logs for a limited period for security, debugging, abuse prevention, and reliability.
  • If your account is disabled or revoked, we may retain records needed to prevent abuse or preserve an audit trail.
  • When you delete your account, we revoke every sign-in and browser key, delete your photos, reports, collections, alert settings and phone number, and then delete the account. We keep a one-way fingerprint of your email address so a new account with the same email does not receive the free grade again, and the payment processor's customer identifiers so no further charges can occur. Our payment processor and Apple keep their own billing records.

Your Choices

  • You can delete your account in the CardCheck app under Account, then Delete account.
  • You may contact us through the support chat to request access, correction, deletion, or export of personal information, subject to identity verification and legal limits.
  • You may ask us to disable email alerts or queue access.
  • You may turn off SMS and remove your saved phone number in the dashboard, or reply STOP, CANCEL, UNSUBSCRIBE, QUIT, or END to an Autoqueue text. SMS opt-out does not disable email alerts or browser access.
  • You may move your key to a different browser yourself from your dashboard, once per calendar month. Contact us if you need a switch beyond that allowance.
  • You can remove locally stored extension data by uninstalling the extension or clearing its browser storage.

Security

  • We use technical and organizational measures designed to protect Autoqueue, including TLS, hashed access keys, encrypted stored secrets where needed, least-privilege access, and admin-only controls.
  • No system is perfectly secure. You are responsible for keeping your account credentials, email inbox, two-factor authentication codes, and Autoqueue access key safe.

Children

  • Autoqueue is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes

  • We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.

Contact

  • Autoqueue is operated by Dcipher LLC. Contact us through the support chat on autoqueue.app, or see autoqueue.app/support.