Privacy policy

MLBTSDB is a card database and market price tracker for MLB The Show. We are not affiliated with, endorsed by, or sponsored by Sony Interactive Entertainment or Major League Baseball.

For any privacy question, contact us at the address published on the site.

If you create an account: your email address, a display name you choose, and a hashed password. We never store your password in readable form.

If you subscribe: a Stripe customer identifier and your subscription status. Card numbers and billing details are handled entirely by Stripe and never reach our servers.

If you consent to analytics: pages visited, approximate location by country, device type, and referring site, collected by Google Analytics. No analytics cookies are set unless you accept them.

Advertising: pages show ads served by Google AdSense. If you accept cookies, Google and its partners may use cookies to personalise ads based on your visits to this and other sites. If you decline, ads are still shown but are not personalised and no advertising cookies are set. Premium members are not shown ads, and the ad script is not loaded for them.

Server logs, retained briefly, may include IP addresses for security and abuse prevention.

To operate your account and authenticate you (necessary to perform our contract with you).

To process subscription payments (necessary to perform our contract with you).

To understand how the site is used and improve it (with your consent, which you may withdraw at any time).

To show advertising that helps fund the site, personalised only with your consent.

To keep the service secure and prevent abuse (our legitimate interest).

Account and billing email (verification, password reset, receipts and changes to your subscription) is part of running your account and is always sent.

Service email is about things you set up: price alerts firing, alerts that are not firing, and a few getting-started tips in your first week. It is on by default, and every one carries a one-click unsubscribe link. You can change any of it at Account › Email preferences.

News and offers are sent only if you tick the box when you sign up or turn them on later, or for up to two years after a Premium purchase unless you opt out.

You can also sign up for news without an account, from the form in the site footer or on some pages. We store your email address, where and when you signed up, the language you used, the exact wording you agreed to, and whether you have since unsubscribed. If the address already has an account, the sign-up is recorded on that account instead. Every news email carries an unsubscribe link.

We record when each email was sent, whether it was delivered, and whether a link in it was clicked, so we can stop sending what does not help and stop mailing addresses that bounce. We do not track email opens.

We also record when you were last signed in and which language you browse in, so emails reach you in that language and we can tell when an account has gone quiet.

The optional MLBTSDB Sync extension reads your MLB The Show inventory from theshow.com while you are signed in there, and sends it to your MLBTSDB account so features like team building can use the cards you own.

It sends only which items you own and how many of each. It does not read or send your theshow.com username, password, cookies, stubs balance, or anything else on the page, and your theshow.com sign-in never leaves your browser.

We store your inventory with your account, along with when it was last synced and a log of syncs that we keep for 30 days to enforce sync limits. Each browser you connect gets its own key, which you can revoke from your account at any time.

You can delete your synced inventory from your account page, or disconnect and remove the extension at any time. Deleting your account deletes your inventory and every extension key with it.

Stripe — payment processing and subscription management.

Resend — sending email, and reporting whether it was delivered or clicked.

Bunny.net — image and asset delivery.

Google Analytics — usage analytics, only if you consent.

Google AdSense — advertising. Google may use cookies to personalise ads only if you consent; you can also opt out of personalised advertising at any time in Google's Ad Settings (adssettings.google.com).

We do not sell your personal data.

A strictly necessary cookie keeps you signed in. It cannot be disabled without breaking authentication.

A preference cookie records your cookie choice so we do not ask again.

Analytics cookies are set by Google Analytics, and advertising cookies by Google AdSense and its partners, only after you accept. Declining leaves them unset.

Account data, including any inventory synced by the browser extension, is kept while your account exists, and deleted on request.

Newsletter sign-ups without an account are kept until you ask us to delete them. Once you unsubscribe we stop emailing you, and keep only the record that you consented and then unsubscribed.

Records of the emails we sent you are kept for about 13 months.

Billing records are retained as long as tax and accounting law requires.

Analytics data follows Google Analytics retention settings, and advertising data follows Google's own retention policies.

You may request access to, correction of, or deletion of your personal data, request a portable copy, object to processing based on legitimate interest, and withdraw analytics or advertising consent at any time.

To exercise any of these, contact us. If you are in the EU or UK you also have the right to complain to your data protection authority.

MLBTSDB is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

If we make a material change to this policy we will update the date above and, where the change is significant, notify account holders by email.