Privacy Policy

1. Who We Are

CollectorBased (“we,” “us,” or “our”) is a platform for Pokemon TCG collectors and vendors to track inventory, manage finances, and find the best deals across third-party marketplaces. Our website is www.collectorbased.com.

2. Information We Collect

Account information: When you sign up, we collect your name, email address, and profile photo via Clerk (our authentication provider). If you sign in with Google or Apple, we receive the information you authorize those providers to share.

Inventory & transaction data: Card names, quantities, purchase prices, sale prices, and related financial data you enter into the platform.

Social activity: Posts, comments, ratings, direct messages, and follows you create on the platform.

Device information: Device type, operating system, browser type, and push notification tokens (if you enable notifications).

Location information: In the Events tab, if you tap “Use my location” and grant your device's location permission, we collect your precise device location to find card shows and events near you. You can instead type a city or ZIP code, in which case no device location is collected. The location you provide (coordinates and a city/state label) is saved to your account so the Events tab remembers your search area — you can change or remove it at any time. We use your location only to show nearby events, never for advertising or tracking.

Usage data: Pages visited, features used, and interaction patterns to improve the product. We do not sell this data.

3. How We Use Your Information

• Provide and maintain the CollectorBased platform
• Show card shows, tournaments, and meetups near you in the Events tab (only when you grant location access or enter a place)
• Surface deals from third-party marketplaces and route affiliate-tagged outbound links
• Send push notifications you've opted into (messages, price alerts, follows, etc.)
• Generate financial reports and analytics for your account
• Improve our product based on aggregated, anonymized usage patterns
• Prevent fraud, abuse, and enforce our terms of service
• Respond to support requests

4. Data Sharing

We do not sell your personal data.

We share data only with:

• Clerk — authentication and user management.
• Supabase — database hosting (data stored in US-East).
• Stripe — payment processing for web Pro subscriptions.
• RevenueCat / Apple — payment processing for iOS Pro subscriptions via in-app purchase.
• Vercel — application hosting and CDN.
• Firebase / Google FCM (Android) and Apple Push Notification Service (iOS) — delivery of push notifications you opt into.
• Sentry — error tracking and crash reporting.
• Google Gemini AI — powers two features: (a) the AI card scanner sends the photo you take to Gemini for card identification; (b) automated content moderation sends user-generated text and uploaded images to Gemini for classification (SAFE / HARASSMENT / EXPLICIT / DANGEROUS) before content is posted. Under our Gemini API terms, submitted content is not retained for model training.
• Card catalog & pricing provider — supplies our card catalog, market pricing, and graded-price lookups. We send card identifiers (name, set, number) as query parameters; no user-identifying data is sent.
• eBay Browse API — fetches active eBay listings for cards you view so we can show current sold-price comparisons. We send card identifiers as query parameters; no user-identifying data is sent.
• OpenStreetMap (Nominatim) — converts the location you provide in the Events tab (a typed place, or your device coordinates if you use “Use my location”) into map coordinates and a city/state label. We send only that place text or those coordinates; no user-identifying data is sent.
• TCGPlayer — outbound affiliate links route through TCGPlayer's partner-tracking domain (see Section 4a). No data beyond the click is shared.

Each provider processes data under its own privacy policy and only as necessary to provide its service.

4a. Affiliate Links and Outbound Tracking

CollectorBased displays product listings from third-party marketplaces (eBay, TCGPlayer, Fanatics) via their affiliate / partner programs. When you tap a Buy / Browse / Sell-here link, you are taken to the third-party site, and a tracking parameter or short-lived cookie may be set on that site's domain so the third party can attribute your purchase to CollectorBased and pay us a commission. The price you pay is not affected.

Specifically:

• eBay Partner Network — outbound eBay links are tagged with our campaign ID. eBay sets an attribution cookie on its own domain when you arrive.
• Impact.com (TCGPlayer + Fanatics) — outbound links route through Impact's tracking domain (partner.tcgplayer.com / fanatics.93n6tx.net), which redirects to the destination after recording the click. The cookie is set on the third-party site, not on CollectorBased.

On the iOS app, affiliate tracking JS scripts are deliberately not loaded; only the affiliate URL parameters travel with your tap to the third-party site. You can disable affiliate tracking entirely by clearing cookies on the third-party site after you click. Doing so does not affect your CollectorBased experience.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account (Settings → Account → Delete Account), we permanently delete all your data from our systems, including inventory, transactions, messages, and profile information. Clerk user data is also deleted. This process is irreversible.

6. Your Rights

You have the right to:

• Access your data — all your data is visible in the app
• Export your data — use the Excel/PDF export features
• Delete your account and all associated data
• Opt out of push notifications at any time (Settings → Notifications)

For data requests beyond what the app provides, contact support@collectorbased.com.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), server-side authentication via Clerk, row-level database security policies, and rate limiting on API endpoints. CollectorBased does not process purchases, hold inventory, or take custody of funds — all card transactions occur on third-party marketplaces, and CollectorBased never stores credit card numbers, bank details, or other sensitive payment instrument information. Pro subscriptions are processed by Stripe (web) or Apple (iOS).

8. Children's Privacy

CollectorBased is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us at support@collectorbased.com.

9. Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes via email or in-app notification. The “Last updated” date at the top reflects the most recent revision.

10. Contact

Questions or concerns? Email us at support@collectorbased.com.