Privacy policy

What we collect

• Your email address, when you sign in. We use it to send sign-in links, receipts and replies to your messages. No newsletters unless you ask for one.
• Card photos you upload, and the estimates we produce from them, so you can see your scan history.
• Usage counts: how many estimates, searches, pricing batches and exports you used this month, to enforce plan quotas.
• Billing records from Stripe: your plan, subscription status and renewal date. Card numbers go to Stripe and never reach us.
• Aggregate traffic through Vercel Analytics, which does not use cookies.
• Messages you send through the contact form.

How photos are used

Photos are sent to our grading service, and from there to AI vision models, to identify the card and estimate its grade. We may also use uploaded photos to measure and improve the accuracy of the grading model. If you do not want your photos used for that, tell us and we will exclude them. We never sell photos or personal data, and we do not show your photos to other users.

Uploaded photos are stored at addresses that are long and unguessable but not password-protected. Do not photograph anything other than the card.

Photos in the pricing tool

The pricing tool handles photos differently from single-card scans. Your browser re-encodes each photo as a JPEG, and downsizes large ones, before sending it. Our server cuts it into per-card images (front and back, if you upload both) and sends those card images to an AI vision model, reached through OpenRouter, to read what each card is. If you tick the grade advice option, images of raw cards also go to our grading service. The photo and the per-card images are held in memory for that request only: we do not write them to our file storage or our database.

What we keep is one small thumbnail per card, at most 128 pixels on its longer side, saved with that card's row in your batch so you can recognise the row later. Removing a row in the tool deletes its saved thumbnail. To have a whole batch deleted, use the contact form.

Who processes data for us

• Vercel: hosting, photo storage (Vercel Blob) and analytics.
• Neon: the database.
• Stripe: payments and the billing portal.
• Resend: email delivery.
• Our grading service host, and AI model providers reached through OpenRouter, which receive card photos only to process them.

Cookies

One session cookie when you sign in. No advertising or cross-site tracking cookies.

How long we keep it

Account data, photos and estimates stay until you delete your account or ask us to delete them. Billing records are kept as long as tax law requires. Contact messages are kept until the conversation is resolved.

Your rights

You can ask for a copy of your data, a correction, or deletion of your account and photos at any time through the contact form. We act on requests within 30 days.

Changes

If this policy changes in a way that matters, we will update the date above and, for material changes, email signed-in users first.