Privacy Policy

Last updated September 16, 2026

Cardboard Capital (“we,” “us”) makes an app and website for tracking Pokémon trading-card prices, cataloging your collection, and reading market analysis. This policy explains what we collect, why, and the choices you have. We collect only what the product needs to work.

Information we collect

• Account information. Your email address (used only to send a one-time sign-in code — we never store a password) and the handle you choose.
• Collection data. The cards you mark as owned, watched, or scanned, along with amounts you optionally enter (such as what you paid).
• Scan photos. When you scan a card, a compressed copy is saved on your device as a keepsake in your Card Dex. The cropped card image is also sent to our servers to identify it. By default we keep the crops that improve recognition — those the scanner could not identify confidently, plus a small sample of successful matches. What is kept is the card face alone, never your surroundings. Retained crops are stored privately, are never public, and are deleted automatically after 90 days. You can switch this off at any time under Settings → Data & privacy → Help improve scanning, which stops it immediately and deletes the crops we already hold.
• Graded slabs. When you scan a graded slab, we read the label — grader, grade and certification number — to identify it and price it at that grade. The certification number is a property of the slab, not of you: we keep a table of which card and grade each cert corresponds to so the next scan of the same slab is instant. The link between a cert andyour scan follows the same retention as scan data and is removed with it.
• Location. We do not read or collect your location. The app never asks for it.
• Usage signals. On-device activity (cards viewed, searches, questions asked) is used to personalize your experience and to understand how the app is used, such as whether a first scan succeeded. These signals stay on your device unless you enable personalization, and can be turned off in the app. Signals we receive are kept for 14 months, then deleted or de-identified, and go with your account if you delete it.
• Crash and performance reports. iOS produces daily reports on how the app performed on your device — launch time, hangs, frame hitches, memory use — and a diagnostic report if the app crashes or freezes. We receive these so we can fix problems. They are tied to a random install identifier, not your name or email, contain no card, photo or collection data, are never used for advertising, and are deleted after 14 months.

How we use it

• To sign you in and keep your collection synced across your devices.
• To show prices, market analysis, and personalized suggestions.
• To operate, secure, and improve the service.

We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.

How data is stored and shared

Account and collection data are stored on our infrastructure (Neon/Postgres) and transmitted over encrypted HTTPS. Retained scan crops are stored in private cloud storage (Amazon S3). Sign-in emails are delivered by our email provider (Resend). Card price and image data come from public trading-card datasets. We share personal data only with these service providers as needed to run the app, or when required by law.

Your choices and rights

• Turn personalization off at any time in the app under Settings.
• Delete individual scan photos from your Card Dex on device.
• Turn off “Help improve scanning” to stop us keeping scan crops and delete the ones we hold.
• Delete your account in the app at any time under Settings → Account → Delete account. That permanently removes your account and its server-side data, including every retained scan crop. You can also email us and we will do it for you.

Children

The app is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

We may update this policy; material changes will be reflected by the date above.

Questions or data requests: support@cardboardcapital.net