Your data
Delete your account.
Deleting is permanent and self-serve — you do not need to ask us, wait for a reply, or install anything. This page says exactly what disappears, what stays with every identifier destroyed, and the short list of things we are legally required to keep. No page of ours will ever promise an erasure the code does not actually perform.
Do it yourself, in about a minute
The same flow works in the Android app and in any web browser. You do not need the app installed to delete an account.
- 1
Sign in
Open waffles.cards/login in any browser, or the Waffles app, and sign in with the email on the account. Forgotten password? Use the sign-in link option — it emails you a way in without one.
- 2
Account → Settings → Delete account
The screen shows exactly what will be deleted, what is kept, and anything still open on your account — with real numbers read from your account, not a generic list.
- 3
Type DELETE
Deletion is irreversible, so it takes a typed confirmation rather than a single tap. The moment you confirm, your login is removed and that email is free to sign up again from scratch.
What happens to your data
Three buckets. There is no fourth, and nothing is left vague.
Deleted
Removed from our systems. Gone.
- Your login and the email address on it
- Your profile: username, avatar, preferences, referral code
- Every error report sent from your device
- Your address on the launch email list, if it is on there
- Everything the app stored in your browser — including the random device id
Anonymized
The row survives; nothing that identifies you does.
- Your card pulls stay in the public live-pulls feed. That feed is card names, values and rarities — community content, not personal data. The random device id attached to your rows is erased outright, so nothing can be traced back to you or grouped together.
- Shipping addresses are erased. If a parcel is already on its way to you when you delete, its address is kept for as long as it takes to arrive — you asked us to post you physical cards and we cannot mail a deleted address — and is then erased automatically by the database the moment the shipment is marked delivered or cancelled.
Kept, if you ever paid us
Financial records, with your name, email, device and account link destroyed.
- Payment records: amount, currency, status, and Stripe’s transaction identifiers.
- Your money history: every load, purchase, sale and cash-out on your account.
- Purchase records: which pack, which tier, what it cost, and its fairness commitment — the hash of the seed that pack was dealt from.
Why: tax and anti-fraud law requires businesses to keep records of real money. In Canada that is six years from the end of the tax year. We cannot delete those and stay lawful, so we destroy everything that connects them to a person instead — what is left is a line in a ledger. If you never spent money with us, this bucket is empty and your account record is deleted outright along with everything else.
Things that have to be settled first
Deletion can be refused while something of yours is still open. That is deliberate: an account deletion should never quietly take something you own. Every one of these you can clear yourself, in the app, without contacting anyone.
Cards still in your vault
Those are real physical cards you own. We are not going to decide to buy them from you, and we are certainly not going to keep them. Sell them back or request shipping first. A card listed for sale has to be un-listed before you can do either.
A pack you have not finished
If you paid for a pack and have not ripped it, or have ripped it and not decided every card, you have not received what you paid for yet. Finish it, then delete.
Money in your balance
Deleting forfeits whatever is in your balance, so the app makes you confirm the exact amount separately before it will go through. Withdraw first if you want the money: buyback and sale earnings can be paid out from the wallet, loaded balance cannot.
If you cannot get into the account
Lost the password, lost the inbox, or the app will not open for you — email hello@waffles.cards from any address. Tell us the email address on the account. A person reads it and completes the deletion by hand, applying exactly the rules on this page, and replies when it is done.
The same address handles a request to see what we hold about you, to correct it, or to be removed from the launch email list without deleting anything else. If the request is about the pull feed or an error report rather than an account, include the device id — it is in your browser storage under waffles_device_id.
What we cannot delete for you
If you ever paid through Stripe, Stripe holds its own copy of that payment and of the email you entered on its checkout page, under its own retention schedule. We do not control it and will not pretend otherwise — contact Stripe directly about data they hold. Everything else described on this page is ours, and ours is what we delete.