Protected sign-in
Passwords are stored as salted hashes, not readable passwords. Session cookies use Secure, HttpOnly and SameSite restrictions.
✦ YOUR WORLD. YOUR CHOICE.
Your collection.
Your privacy.
Big adventures deserve clear answers. Learn how RareFoil Society handles your information, photos, and account—without the tiny legal lettering.
RAREFOIL SOCIETY · TO BE OWNED BY VAULTEDCOVEN LLC (REGISTERED IN WYOMING, USA)
01 / SECURITYA little magic.
A little magic.
A lot of care.
Your login belongs to you. We build checks around it, not shortcuts through it.
Private by default
Collection and photo requests check your signed-in identity and the owner of the record. Other members cannot browse your private card library.
Keep your key safe
Use a unique password, save your Recovery Scrolls somewhere private, and never share an invitation Sigil, recovery code or session.
No impossible promises
No website is risk-free. Keep your browser updated and report anything that looks suspicious.
Your details aren't
everybody's business.
What the platform uses
Your username, display name, password hash, sign-in sessions, collection and card details, uploaded photos, optional prices, and limited security diagnostics needed to operate the service.
Who sees what
Your own authenticated account can see its collection. Authorized platform processing may handle photo uploads. Founder tools have specific operational permissions; they are not a universal member login. Council duties are separately scoped.
Not public by default
Private card records, member-uploaded photos and account recovery information aren't intended for public galleries or other members. Never upload something you don't have permission to use.
03 / PHOTOS & COLLECTIONSYour photos.
Your photos.
Your story.
Photography and cataloging should be convenient without making your pictures public.
01
Upload & crop
Photos are checked and prepared for the crop queue. Image files are validated and uploads have size limits.
02
Private storage
Pokémon records are held in Cloudflare D1 and photographs in private Cloudflare R2. If connected, a private Google Drive archive can retain originals and processed crops under the owner's Google account.
03
Research, then verify
AI-assisted identification may suggest details, but a suggestion is not proof of a variant, grade or price. Research and backups may involve external services; their exact data handling needs confirmation before publication.
Stay in control.
Edit your collection
Manage card details, archive or restore records, and replace or remove supported images from your own account.
Open My Collection ↗Secure your account
Change your password in your account's Security tab. A password change revokes other active sessions. You can also manage Recovery Scrolls.
Account settings ↗Request data or deletion
Ask Founder support for access, correction, or export. Delete your own account with the authenticated controls below. Permanent account deletion is available below to every signed-in member. Email alone cannot establish account ownership.
How requests work ↗05 / DATA REQUESTSYour account.
Your account.
Your decisions.
Need a copy, a correction, or a correction to your details? Here is what happens before any sensitive account action.
01
Tell us what you need
For access, export, or correction, email vaultedcoven@gmail.com. Share only a username and a short description—not passwords, codes or identity documents.
02
Prove the account is yours
The Founder must establish a secure identity-verification method before disclosing private data. An email address or username alone is not enough. Never send your password, recovery codes or Sleeping Wall secret.
03
Confirm the scope
Access and export requests require ownership verification. Account erasure is separate: use the signed-in Delete Account controls above, then follow the private cleanup status.
06 / REPORT A CONCERNSomething feel off?
Something feel off?
Speak up.
Security issues, photo privacy, and account concerns deserve attention. Prepare a minimal report—never include passwords, recovery codes, Sigils or payment numbers.
FOUNDER SUPPORT · EMAIL
Contact RareFoil Society at vaultedcoven@gmail.com. Prepare your message below, then open your email app and tap Send yourself. Never include passwords, recovery codes or invitation secrets.
This page does not upload, save, or automatically submit what you type. The email link opens your device's configured mail app with the draft; you must review and press Send there. Without a mail app, copy the report and manually email vaultedcoven@gmail.com. Sending an email shares the message with your chosen email provider. For recruitment restrictions only, use the private Founder Appeal.
Good questions.
Clear answers.
Is RareFoil Society safe to open on my phone?
The site runs in your web browser, without requiring an app install. Most updated phones can open it, but complex 3D effects can slow older devices or close a browser tab. No online service can promise zero risk.
Can visiting the website read my phone's photos?
Opening a page does not grant access to your photo library. You choose which images to upload using your device's file picker, subject to browser permissions.
Can another collector see my cards or investment numbers?
Private collection endpoints check the account that owns each record. Ordinary members cannot browse other members' collections, photos or sale details.
Can the Founder access my account?
The Founder has administrative and processing responsibilities, including limited member and READY-crop operations. Those permissions are not the same as signing in as you, and ordinary Council membership does not unlock your private library.
Does RareFoil Society use AI or other companies?
AI-assisted research and optional Google Drive backup may involve third-party services. Exact providers, processing and data-sharing practices must be confirmed in the final approved policy before launch.
Can I permanently delete my account?
You can edit, archive and remove some individual items now. Use DELETE ACCOUNT on this page while signed in. Final confirmation locks the account and starts durable cleanup. No ordinary member approval is needed. Cleanup status stays pending until applicable storage is verified. Provider recovery history expires under the provider’s retention policy.
Can I ask for a copy of my information?
Yes, you can ask Founder support about accessing, correcting or exporting your stored information. An automated data-export tool is not currently available. We cannot share private records until your account ownership is verified using an approved process.
Are valuations financial advice?
No. Estimates and catalog information can be incomplete or outdated. Verify recent sales and make your own financial decisions.
✦ NO HIDDEN MAGIC TRICKS
Trust is earned.
One clear answer at a time.
Policies are being prepared for Founder and legal review before public launch.