Cascade App IconCascade

Privacy policy

Last updated: February 2026

GENERAL INFORMATION

Cascade LLC ("we", "us", "our", or "Cascade") is committed to protecting and respecting your privacy. We believe that privacy is a basic and fundamental human right, and we aim to collect as little personal data as necessary. Any information we collect is only used to operate Cascade. We do not sell or trade your information with other companies or individuals.

We follow generally accepted standards to protect the personal data submitted to us. If you have any questions about the security of your personal data, please contact us. Except as described under the "Disclosure of Your Data" section below, we do not provide your personal data to any third party without your specific consent, as defined by applicable law.

DATA WE MAY COLLECT

We collect the following categories of information:

  • Account information: When you create an account, we collect your email address. If you sign in via a third-party provider (such as Apple or Google), we may receive your name and email address from that provider. We do not receive or store your third-party account password.
  • User content: Deck lists, inventory data, wishlists, watchlists, card lists, and other content you create or import into Cascade.
  • Usage data: We may automatically collect information about how you interact with Cascade, including pages visited, features used, and the date and time of your visits. This data is used to improve the service and diagnose technical issues.
  • Device information: We may collect your IP address, browser type and version, operating system, and device type for security and analytics purposes.
  • Payment information: We do not directly collect or process credit or debit card data. Payments are handled by third-party processors (Stripe for web, Apple for iOS). See the "Third-Party Service Providers" section below for details.

COOKIES

Cascade uses cookies and similar technologies to operate the service:

  • Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
  • Preference cookies: Used to remember your settings and preferences, such as theme and view options.

Cascade does not use third-party advertising cookies and does not display third-party advertisements.

LEGAL BASIS FOR PROCESSING

We process your personal data under the following legal bases as defined by applicable data protection laws:

  • Contract – Processing necessary to provide our services to you, including account management, inventory tracking, and deck building features.
  • Consent – Where you have given explicit consent, such as when subscribing to optional communications.
  • Legitimate interests – Processing necessary for our legitimate business interests, such as improving our services and preventing fraud, where these interests do not override your rights.
  • Legal obligation – Processing necessary to comply with legal requirements.

THIRD-PARTY SERVICE PROVIDERS

We use trusted third-party services to help operate Cascade. These providers only process your data as necessary to perform their services and are contractually obligated to protect your information:

  • Stripe – Processes payments for web subscriptions. Stripe may collect payment card information and billing details. See Stripe's Privacy Policy.
  • Apple – Processes in-app purchases made through the iOS app. See Apple's Privacy Policy.
  • Amazon Web Services (AWS) – Provides cloud infrastructure to host and operate Cascade. Data is stored in secure AWS data centers. See AWS Privacy Policy.
  • Email service provider – Sends transactional emails such as password resets. Only your email address is shared for this purpose.

INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and maintained on servers located in the United States. If you are located outside the United States, please be aware that your data will be processed and stored in the United States, where data protection laws may differ from those of your jurisdiction. By using Cascade, you consent to this transfer.

DATA SECURITY

We take reasonable measures to protect your personal data, including:

  • Passwords are stored using industry-standard encryption.
  • Data is transmitted using HTTPS/TLS encryption.
  • Access to user data is restricted to authorized personnel only.
  • Infrastructure is hosted on secure AWS data centers.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

YOUR RIGHTS

Under applicable data protection laws, you have the following rights regarding your personal data:

  • Right to access – You can request a copy of the personal data we hold about you. You can export your decks, inventory, and lists from your account settings.
  • Right to rectification – You can update your account information at any time through your account settings.
  • Right to erasure – You may delete your account at any time from your account settings. When you do, Cascade will remove all information we have about you, including your account details, settings, inventory, and decks. This action is permanent and cannot be undone.
  • Right to data portability – You can export your data in common formats from your account settings.
  • Right to object – You can object to processing of your personal data in certain circumstances by contacting us.
  • Right to withdraw consent – Where we rely on consent, you can withdraw it at any time by contacting us.

To exercise any of these rights, please use the options in your account settings or contact us.

CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom it is shared.
  • Right to delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to opt out of sale: Cascade does not sell personal information. We have not sold personal information in the preceding twelve (12) months.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of personal information collected:

  • Identifiers (email address, IP address, account name)
  • Internet or other electronic network activity (usage data, pages visited)

Categories NOT collected: Protected classifications, commercial information, biometric information, geolocation data, sensory data, professional or employment information, education information.

To submit a verifiable consumer request, please contact us. We will respond within 45 days.

CHILDREN'S PRIVACY

Cascade is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers. If you believe we have collected information from a child under 13, please contact us immediately.

DATA RETENTION

We retain your personal data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems. We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes or enforcing our agreements.

DISCLOSURE OF YOUR DATA

We may disclose your personal data in order to comply with any legal obligation such as to comply with a subpoena, bankruptcy proceedings, similar legal process, or in order to enforce or apply our agreements with you; or to protect the rights, property, or safety of Cascade, our customers, or others.

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "last updated" date. Your continued use of Cascade after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.