Privacy

This policy describes what Process Cards collects for a sports card collection app run by Joey Gorgen in Minnesota, USA. It is a plain-language template, not legal advice. Questions and deletion requests go to joey.gorgen21@gmail.com.

Who may use it

Children under 13 are not allowed, and we do not knowingly collect their information. If you are 13 through 17, use a free desk only with a parent or guardian’s consent. Paid Premium is only for people 18 or older. If you believe a child under 13 has an account, email us and we will delete it.

Data we collect

If you sign up, we store your email, the terms version you accepted, and the time you accepted it. Supabase stores the password or magic-link login. We do not see your full card number. The vault document can include cards, notes, watch listings, listing drafts, locations, and photos you upload. Value history is the daily totals recorded on a signed-in device. Stripe tells us the subscription status. Rate limits use an IP address for a short window and then drop it. We do not sell your data, and we do not resell your collection or photos.

Processors

Supabase stores the account and the vault. Stripe processes Premium payments. Vercel hosts the app. Photo auto-fill sends a smaller copy of a photo through Vercel AI Gateway to a Google model, only to suggest card fields. Upstash Redis is used for passcode sync and rate limits when those features are turned on. Card Hedge, eBay, and Mercari are not connected, and the vault is not sent to them. Copying a listing only puts text on your clipboard.

How long we keep it

Account data and the vault stay until you delete the account or ask us to delete them. A canceled subscription stays marked canceled so the account knows Premium is off. Server logs and rate-limit counters are kept only as long as the host or the short rate-limit window needs them. Photos live inside the vault document, not in a separate photo library.

Export and deletion

On Account, Export my data downloads a JSON file of the vault, value history, and the terms acceptance we have stored. Delete my account asks you to confirm, cancels a Stripe subscription, and then deletes the Supabase user, the vault, the photos in it, and the history. You can also email joey.gorgen21@gmail.com to ask for export or deletion.

A breach

If we learn of a breach of account data that the law requires us to announce, we will notify the affected users and, where required, the authorities, without unreasonable delay. The notice will say what happened and what you can do.

Estimates

Values, profit, scores, and comps in the app are estimates. They are not financial, investment, or tax advice. The Terms cover how the desk and Premium work.