Privacy Policy

This Privacy Policy explains what information TCGSidekick ("we") collects, how we use it, and the third parties that process it on our behalf.

Information we collect

• Account information — your email address and authentication data.
• Card images you upload for scanning and grading.
• Usage data — your scan and grade history, results, and quota counts.
• Payment information — handled by Stripe; we do not store full card numbers.

How we use it

• To identify and grade your cards and return pricing and listing exports.
• To operate your account, enforce plan limits, and process subscriptions.
• To maintain, secure, and improve the Service.

Card images & AI processing

Images you upload are sent to our AI provider (Anthropic) to identify and grade the card, and may be stored in our hosting/storage provider (Supabase) so you can review your history. They are used to provide the Service to you, not to publicly identify you.

Unless you opt out, we also retain card images and scan data to train and improve our card-recognition and grading models. These are stored privately and de-identified — keyed to a scan rather than to your name or email. You can switch this off anytime from your dashboard (it stops new retention going forward), and you can ask us to delete previously retained images at any time.

Third-party processors

• Supabase — authentication, database, and image storage.
• Stripe — subscription billing and payment processing.
• Anthropic — AI card identification and condition grading.
• Vercel — application hosting.
• TCGplayer — market pricing data and product links.

Cookies & sessions

We use essential cookies to keep you signed in. We do not use them for third-party advertising.

Data retention

We retain your account data and scan/grade history while your account is active. You can request deletion of your account and associated data by contacting us.

If you have not opted out, de-identified card images and scan data may be retained to improve our models, including after your account closes. You can opt out anytime from your dashboard and request deletion of retained images by contacting us. In a merger, acquisition, or sale of assets, retained de-identified data may transfer to the successor under equivalent commitments.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can permanently delete your account and all associated data — including any retained card images — yourself from your dashboard at any time. For other requests, contact us and we will respond as required by applicable law.

Children

The Service is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions or requests? Reach us on Discord.