Privacy Policy

1. Who We Are

CollectorBased (“we,” “us,” or “our”) is a platform for Pokemon TCG collectors and vendors to track inventory, manage finances, and find the best deals across third-party marketplaces. Our website is www.collectorbased.com.

2. Information We Collect

Account information: When you sign up, we collect your name, email address, and profile photo via Clerk (our authentication provider). If you sign in with Google or Apple, we receive the information you authorize those providers to share.

Inventory & transaction data: Card names, quantities, purchase prices, sale prices, and related financial data you enter into the platform.

Social activity: Posts, comments, ratings, direct messages, and follows you create on the platform.

Device information: Device type, operating system, browser type, and push notification tokens (if you enable notifications).

Usage data: Pages visited, features used, and interaction patterns to improve the product. We do not sell this data.

3. How We Use Your Information

• Provide and maintain the CollectorBased platform
• Surface deals from third-party marketplaces and route affiliate-tagged outbound links
• Send push notifications you've opted into (messages, price alerts, follows, etc.)
• Generate financial reports and analytics for your account
• Improve our product based on aggregated, anonymized usage patterns
• Prevent fraud, abuse, and enforce our terms of service
• Respond to support requests

4. Data Sharing

We do not sell your personal data.

We share data only with:

• Clerk — authentication and user management
• Supabase — database hosting (data stored in US-East)
• Stripe — payment processing for web Pro subscriptions
• RevenueCat / Apple — payment processing for iOS Pro subscriptions via in-app purchase
• Vercel — application hosting and CDN
• Firebase/Google — push notification delivery
• Sentry — error tracking and crash reporting

Each provider processes data under their own privacy policy and only as necessary to provide their service.

4a. Affiliate Links and Outbound Tracking

CollectorBased displays product listings from third-party marketplaces (eBay, TCGPlayer, Fanatics) via their affiliate / partner programs. When you tap a Buy / Browse / Sell-here link, you are taken to the third-party site, and a tracking parameter or short-lived cookie may be set on that site's domain so the third party can attribute your purchase to CollectorBased and pay us a commission. The price you pay is not affected.

Specifically:

• eBay Partner Network — outbound eBay links are tagged with our campaign ID. eBay sets an attribution cookie on its own domain when you arrive.
• Impact.com (TCGPlayer + Fanatics) — outbound links route through Impact's tracking domain (partner.tcgplayer.com / fanatics.93n6tx.net), which redirects to the destination after recording the click. The cookie is set on the third-party site, not on CollectorBased.

On the iOS app, affiliate tracking JS scripts are deliberately not loaded; only the affiliate URL parameters travel with your tap to the third-party site. You can disable affiliate tracking entirely by clearing cookies on the third-party site after you click. Doing so does not affect your CollectorBased experience.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account (Settings → Account → Delete Account), we permanently delete all your data from our systems, including inventory, transactions, messages, and profile information. Clerk user data is also deleted. This process is irreversible.

6. Your Rights

You have the right to:

• Access your data — all your data is visible in the app
• Export your data — use the Excel/PDF export features
• Delete your account and all associated data
• Opt out of push notifications at any time (Settings → Notifications)

For data requests beyond what the app provides, contact support@collectorbased.com.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), server-side authentication via Clerk, row-level database security policies, and rate limiting on API endpoints. CollectorBased does not process purchases, hold inventory, or take custody of funds — all card transactions occur on third-party marketplaces, and CollectorBased never stores credit card numbers, bank details, or other sensitive payment instrument information. Pro subscriptions are processed by Stripe (web) or Apple (iOS).

8. Children's Privacy

CollectorBased is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us at support@collectorbased.com.

9. Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes via email or in-app notification. The “Last updated” date at the top reflects the most recent revision.

10. Contact

Questions or concerns? Email us at support@collectorbased.com.