Common to Grail
Menu
Search SportsPokémonEntertainmentSetsGuidesValuesStories About

Privacy policy

Pending legal review. This policy is written in plain language from how the site works today and has not yet been reviewed by an attorney. It will be updated before we add display advertising or any new tracking.

Common to Grail (“we”, “us”) runs commontograil.com. This page explains what information we collect, why we collect it, and the choices you have.

The short version:

  • We use cookieless analytics.
  • We only collect your email address if you choose to subscribe.
  • We do not sell or share your personal information.
  • Stores you visit through our links may set their own cookies.

1. Information we collect

a. Website analytics (Umami, cookieless). We use Umami Cloud to understand which pages are useful. Umami does not use cookies and does not track you across other websites. It records things like:

  • pages viewed and the referring site
  • approximate country
  • device and browser type
  • campaign tags in links (UTM parameters)
  • a few on-site actions: clicks on outbound or affiliate links, newsletter sign-ups, use of site search, and how far a page is scrolled

We do not send your name, email or search history tied to you. For site search, we record whether a search returned results and, at most, short anonymized query text so we can find missing pages. Umami’s hosted service keeps our data for a limited period (currently about 6 months on our plan).

b. Hosting and security logs (Cloudflare). Our site is served by Cloudflare. Like any web server, Cloudflare processes technical data such as your IP address to deliver pages and block abuse. We may also use Cloudflare Web Analytics, which is cookieless and gives aggregate traffic counts.

c. Email newsletter (Kit). If you subscribe, our email provider Kit (ConvertKit) stores:

  • your email address
  • the page or form where you signed up
  • your subscription status

Kit’s emails may include open and click tracking so we can tell which topics are useful. You can unsubscribe at any time with the link in every email. We’ll only email you about Common to Grail content and occasional related offers, and never sell your address.

d. Contacting us. If you email us, we keep your message and address so we can reply.

e. Search on our site. Site search (Pagefind) runs in your browser, and your search text isn’t sent to a search server.

Some links go to stores like eBay, TCGplayer (via Impact) and Amazon. When you click one, you leave our site. That store or affiliate network may set its own cookies or use identifiers to credit us for a purchase. Their privacy policies govern that. We receive commission reports, which generally do not include your name or contact details. See our Affiliate Disclosure.

3. Embedded videos

Where we embed YouTube videos, we use YouTube’s privacy-enhanced mode (youtube-nocookie.com). YouTube may still collect data once you press play, under Google’s privacy policy.

4. How we use information

We use information to:

  • run and secure the site
  • understand which pages help people
  • send the newsletter you asked for
  • reply to messages
  • comply with the law

5. Sale and sharing of personal information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are used in California law). We do not currently run third-party ad trackers. If that ever changes, we will update this policy first and provide any required opt-outs.

We use service providers (Cloudflare, Umami and Kit) that process data on our behalf, only to provide their services to us.

6. Your choices and rights

  • Unsubscribe from email using the link in any email.
  • Ask us to access or delete your newsletter data by emailing our contact address (coming soon). We’ll respond within the time required by applicable law.
  • Depending on where you live, you may have additional rights: to know, correct, delete, or opt out, or to object or restrict processing under GDPR/UK GDPR. Contact us to use them. We won’t discriminate against you for doing so.
  • Most browsers let you block cookies. Our site doesn’t rely on them, but stores you visit through our links may.

7. Children

Common to Grail is a general-audience site and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has subscribed, contact us and we’ll delete it.

8. Data security and retention

We keep data only as long as needed for the purposes above. Analytics are kept for our plan’s retention period. Newsletter data is kept until you unsubscribe or ask for deletion, plus a short period for suppression lists so we don’t email you again. No method of transmission or storage is 100% secure.

9. International visitors

Our service providers may process data in the United States and other countries.

10. Changes

We’ll post updates here and change the “last updated” date. Material changes will be noted at the top of this page.

11. Contact

[Site owner details: coming soon] · [Mailing address: coming soon] · our contact address (coming soon)

Policy text last edited 2026-10-07.