Privacy Policy

What is stored

• Account — your email address, an opaque user id, and a display name if you give one. Used to authenticate you and to keep your collection yours.
• Collection — the cards you add: quantities, conditions, languages, editions and notes. Stored per user, never shared with other users.
• Pricing snapshots — historical price points attached to cards, derived from public sources. They contain nothing about you.
• Activity log — additions, edits and deletions, so you can see what changed.

What is not stored

• No payment details: the service takes no money.
• No browser fingerprints, no advertising profile, no cross-site tracking.
• Nothing is sold to anyone.

Who else touches it

This list describes this deployment, and it is built from the configuration that switches each service on — not copied out by hand.

• Supabase — authentication and the database. Your email address, your user id and your collection are stored there.
• Hetzner Online GmbH — hosting. The servers running this service are in Finland; the company is German. All of it is in the European Union.
• The pricing sources (the Pokémon TCG API and CardMarket) receive card identifiers, never anything about you. They do not know who owns what.

Your rights

Your collection is yours. You can export it as CSV from Settings at any time, without asking us.

You can also delete your account from Settings, which removes your collection and your account data. To access, correct, or request deletion of your data any other way, write to the address below.