Privacy Policy

PureGrail ("we," "us," or "our") operates the website puregrail.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit the Site, subscribe to our newsletter, or submit a contact form.

PureGrail is a publication of Vyze Media, doing business as Vyze Media.

By using the Site, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Information You Provide Directly

We collect personal information only when you voluntarily provide it:

• Newsletter signup: Email address
• Contact form: Name, email address, and the message you submit

Information Collected Automatically

When you visit the Site, we collect anonymized, aggregate analytics data using Plausible Analytics. This includes:

• Page views and referral sources (aggregate)
• Browser type and device category (aggregate)
• Country of origin (not city-level; not stored with any identifier)

Analytics: We use Plausible Analytics, a privacy-first analytics service. Plausible does not use cookies, does not collect personally identifiable information, does not track individuals across sites or devices, and is fully GDPR/CCPA compliant without requiring cookie consent banners. All data is aggregate and anonymized.

Information We Do NOT Collect

• We do not use advertising cookies, tracking pixels, or behavioral targeting.
• We do not operate a business directory or collect business listing information.
• We do not route contact form submissions to third-party marketers or service providers.
• We do not collect financial information (no purchases on this Site).
• We do not collect data from children under 18.

2. How We Use Your Information

• Newsletter: To send you collectibles market updates you signed up for. You can unsubscribe at any time.
• Contact forms: To respond to your editorial tip, correction report, advertising inquiry, or feedback.
• Site analytics: To understand aggregate traffic patterns and improve our content.
• Compliance: To comply with legal obligations and enforce our Terms of Service.

We do not use your information for targeted advertising, behavioral profiling, or sale to third parties.

3. How We Share Your Information

With Service Providers

We share information only with third-party providers who perform services on our behalf:

• Hosting: Vercel / Railway (infrastructure)
• Analytics: Plausible Analytics (anonymized, aggregate only)
• Email: Resend or Postmark (newsletter and transactional emails)
• Security: Cloudflare (DDoS protection, CDN)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

As Required by Law

We may disclose your information when required by law, regulation, or legal process, or when necessary to protect our rights or the safety of others.

Business Transfers

If Vyze Media is involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Retention

5. Data Security

We implement industry-standard security measures:

• Encryption in transit: TLS 1.3 for all data between your browser and our servers.
• Access controls: Personal information accessible only to authorized personnel.
• Infrastructure security: DDoS protection, Web Application Firewall, rate limiting.

No method of electronic transmission is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

For California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for advertising. If you wish to confirm this or opt out of any future data practices, contact us.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, email privacy@puregrail.com. We will verify your identity and respond within 45 days.

For Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana Residents

Under applicable state privacy laws, you have the right to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of the sale of personal data, targeted advertising, and profiling. Contact us at privacy@puregrail.com to exercise these rights.

For All Users

• Unsubscribe from our newsletter at any time using the link in any newsletter email.
• Request deletion of your personal information by emailing privacy@puregrail.com.

7. Cookies

We use minimal, strictly necessary cookies only:

• Session cookie — Maintains your session and CSRF protection. Expires when browser closes.
• Consent preference — Remembers your cookie preference. Duration: 12 months.

We do not use advertising cookies, tracking pixels, Google Analytics cookies, or any cross-site tracking technology. Plausible Analytics operates entirely without cookies.

8. AI-Generated Content

Content on this Site is created with the assistance of AI tools, including Claude by Anthropic. AI tools used for content creation do not have access to user personal data. They are used solely for article drafting and editorial assistance. All content is for informational purposes only and does not constitute financial or investment advice.

9. Third-Party Links

The Site may link to third-party websites and marketplace sources. We are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

10. Affiliate Links

Some articles may contain affiliate links to card marketplaces or related products. If you click an affiliate link and make a purchase, we may earn a commission. Affiliate partners do not have access to your personal data collected through this Site.

11. Children's Privacy

The Site is not intended for persons under 18. We do not knowingly collect personal information from individuals under 18. If you believe a child has provided information through our Site, contact us at privacy@puregrail.com and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted by updating the "Last Updated" date. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact Us

PureGrail
Operated by Vyze Media, DBA Vyze Media
Email: privacy@puregrail.com