This Privacy Policy explains how TCGValuator ("TCGValuator," "we," "us") collects, uses, and stores information when you use the TCGValuator app (the "Service").
Information We Collect
- Account information. If you register with email and password, we store your email address and a securely hashed password (we never store your password itself). If you sign in with Google, we store the name, email address, and profile picture URL Google provides.
- Card photos and scan data. When you scan a card, the photo you capture is sent to Google Cloud Vision for text recognition, and may be stored with your account so you can review your scan history. Scan records (Pokémon name, card number, set, prices, and profit calculations you enter or that are looked up) are stored and tied to your account.
- Session data. A signed, secure cookie keeps you logged in between visits. It contains only your account ID — no password or payment data.
How We Use Information
We use the information above solely to operate the Service:
- To authenticate you and keep your scan history private to your account.
- To extract card details from photos you submit (OCR).
- To look up card and pricing data to show you a profit estimate.
We do not sell your information, and we do not use it for advertising or share it with data brokers.
Third-Party Services
To provide its features, TCGValuator sends limited data to:
- Google Cloud Vision API — receives the photo you capture, to extract text from the card.
- Google Sign-In — used only if you choose "Continue with Google", to verify your identity.
- eBay Browse API — receives only the card name/set/number you're looking up (no personal or account information) to fetch current listing prices.
- TCGdex — a free, public card database; receives only the card name/number you're looking up.
Each of these services has its own privacy policy governing how they handle data sent to them.
Data Storage & Security
Account and scan data is stored in a MySQL database on our hosting provider (Hostinger). Passwords are hashed with bcrypt before storage and are never stored or logged in plain text. We take reasonable technical measures to protect your data, but no method of storage or transmission is 100% secure.
Data Retention & Deletion
We retain your account and scan history until you ask us to delete it. To request deletion of your account and all associated data, contact us at the email below — we'll process the request promptly.
Children's Privacy
TCGValuator is not directed at children under 13, and we do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact
Questions or data requests: info@trypdfai.com