Privacy Policy
Last updated October 23, 2026.
What we collect
- Contact form: the name, email and message you send, processed by our host Netlify (Netlify Forms), used only to reply to you.
- Referral program: sign-up is limited to people aged 21 or older. We ask for your age on the form but don't store it. We keep only a yes/no flag that you confirmed you're 21+ and the time you confirmed. If you sign up, we store your email (and a normalized version used to prevent duplicates), your referral code, who referred you, the date, whether your email is verified, and a one-way hash of your IP address for abuse prevention. This is stored in Netlify Blobs. We use it only to run the program and check Premium access. You can delete it any time from your referral dashboard. If email verification is turned on, we'll send you a one-time verification email through our email provider.
- Browser storage (localStorage): theme, Terms acceptance, referral code you arrived with, your account token, watchlist and grails, alerts and fired alerts, box logs, owned cards, and last-visit prices. This stays on your device unless you're signed in, in which case your alerts are also saved to your account so they sync.
- Server logs: our host may process standard technical data (IP address, user agent) to deliver and secure the site.
Cookies and advertising (including visitors in the EEA, UK and Switzerland)
What PullMeter itself stores
PullMeter sets no first-party cookies, uses no sessionStorage, and runs no analytics. Our pages use your browser's localStorage for the features below. This data stays on your device (except where noted) and you can clear it at any time in your browser settings. Netlify Forms (contact form only) may use a spam-prevention mechanism.
| localStorage key | Purpose |
|---|---|
pm_theme | your light/dark theme choice |
pm_terms_accepted_v1 | that you accepted the Terms notice, so it isn't shown again |
pm_ref | a referral code from a link you arrived with, and when |
pm_token | your sign-in token if you created a referral/Premium account (sent only to pullmeter.com to load your account) |
pm_grails | your Grail Tracker cards and target prices |
pm_alerts | your price alerts (also saved to your account if you're signed in, so they sync) |
pm_fired | alerts that have already triggered, for the notification bell |
pm_box_logs | your Box Logger entries |
pm_owned | cards you marked as owned in the Set Completion tool |
pm_lastvisit_prices | prices of your tracked cards at your last visit |
pm_lastvisit_changes | price changes since your last visit, for the notification bell |
Google AdSense
- We use Google AdSense to show ads. Your browser loads Google's ad script (pagead2.googlesyndication.com). Google and its partners may use cookies, device identifiers and similar technologies to serve ads, limit how often you see an ad (frequency capping), measure ad performance, and detect and prevent fraud and abuse.
- Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to PullMeter and/or other sites on the Internet. Ads are personalized only where you have given consent (where consent is required).
Visitors in the EEA, the UK and Switzerland
For visitors in these regions, consent is requested through Google's certified consent management platform (Google AdSense Privacy & messaging, which implements the IAB Transparency & Consent Framework) before personalized ads or other non-essential cookies are used. This consent message is being activated in our AdSense account.
Legal bases: we rely on your consent for non-essential cookies and personalized advertising, as required by the ePrivacy Directive and national implementing laws together with the GDPR (EEA), the UK GDPR and the Privacy and Electronic Communications Regulations (PECR) (UK), and the revised Federal Act on Data Protection (nFADP) (Switzerland). You can change or withdraw your consent at any time using the "Privacy & cookie settings" link in the footer of every page. Withdrawing consent doesn't affect processing that happened before you withdrew it.
Your advertising choices
- Google Ads Settings: turn off personalized ads from Google.
- Your Online Choices (EEA/UK): opt out of interest-based ads from participating companies.
- www.aboutads.info/choices (US): opt out of some third-party vendors' use of cookies for personalized advertising.
- Learn how Google uses information from sites or apps that use its services and how Google uses cookies.
Third-party requests
Your browser loads the Google AdSense script (pagead2.googlesyndication.com) on every page, and Google may load further ad resources from its own domains. PullMeter no longer shows card artwork, so your browser doesn't load card images from the Pokémon TCG API or any other card-image host. Affiliate links take you to third-party sites only when you click them. We don't load external fonts or analytics.
Your choices
You can clear your browser storage, delete your referral data from the dashboard, unsubscribe using the link in any email, or contact us to request access or deletion.
Age requirement and children
Anyone can browse PullMeter and use the free tools without an account. Signing up for anything (the referral/Premium program, the newsletter or weekly digest, or the email alert waitlist) requires you to be 21 or older. We don't verify ID. We rely on the age you enter, check it on our server, and store only a yes/no confirmation and its timestamp, never your age. PullMeter isn't directed at children under 13. If you believe someone under 21 has signed up, contact us and we'll delete the record.