Privacy Policy

Last updated October 18, 2026

Draft pending legal review. It describes how the app works today.

What we collect

• Waitlist: your email address, whether you opted in to product news, when you signed up, the page or campaign that referred you, and a one-way hash of your IP address for abuse prevention.
• Account: email, password (stored only as a secure hash) or your Google/Apple sign-in ID, birth month and year and country (to confirm eligibility and region), and your settings.
• Collection: the cards and sealed products you add, prices you paid, notes, storage locations, alerts and saved searches.
• Card scanner and card photos (2A):
  • What the scanner does. When you open the scanner, we ask for camera access, which you can revoke in your device or browser settings at any time. Camera images are sent to our servers so we can identify the card shown (set, number, and name).
  • What we save. Matched card photos are saved automatically: when a scanned card is matched and you add it to your collection, the cropped photo of that card is saved with it. You can see, manage or delete these photos in Settings → Photos (Account › Photos). The scanner shows this notice the first time you use the camera. Nothing is saved for frames that don’t match a card. The photo is linked to that card in your collection (“Your photos of this card”). Photos you upload yourself, for example to record condition, are saved the same way. The rest of each camera frame, outside the crop, is used only to find and read the card and is discarded after processing; it is not saved.
  • Why we save it. So you can see and prove your own copy of the card (its condition, edition, and any flaws), and so the card shows correctly in your collection. Legal basis (EEA/UK): performance of our contract with you (Art. 6(1)(b)).
  • Who can see it. Only you. Your saved card photos are private by default and become visible to others only if you choose to share a photo publicly. Every saved photo, private or shared, is re-encoded to remove location (GPS) and camera metadata.
  • Where it’s stored, and who processes it. On our hosting provider Railway’s storage in the United States, in a folder tied to your account. Card recognition runs on our own servers; no third-party recognition service is used. We don’t send your photos to our card-data or price-data providers.
  • How long we keep it. Until you delete the photo or the card, or close your account. When you delete a photo, the card it’s attached to, or your account, we remove the photo from live storage right away.
  • How to delete it. On the card’s page, open “Your photos of this card” and delete the photo. Deleting your account deletes all your photos.
  • No AI training without your consent. We do not use your card photos to train or improve machine-learning models, ours or anyone else’s, unless you opt in. No such opt-in is offered today. If we add one, it will be off by default, use only card crops (not account details), and you can withdraw at any time. Legal basis (EEA/UK): consent (Art. 6(1)(a)).
  • Please photograph cards only. Avoid capturing faces, other people, documents, or anything personal in the frame. We don’t use photos to identify people, and we don’t create face or other biometric templates.
• Subscriptions and payments:
  • In the iPhone app, you pay Apple with your Apple ID (in-app purchase). Apple handles the payment. We never see your card number or your Apple ID password. We get your plan, its price and store, when it started, when it renews or ends, and Apple’s purchase ID, linked to your Collector Scan account.
  • On our website (US only), our payment provider Stripe handles the payment on its own checkout page. We never see your full card number. We get your email address, your plan, and Stripe’s customer and subscription IDs and status. When you open Manage subscription, we send Stripe your Stripe customer ID so it can show your plan, card and receipts on its own page.
  • Founder spots. We count Founder purchases from the app and the website together so we can stop offering Founder after the first 200.
  • Why. To turn Premium on and off at the right time, to restore your purchase on a new device, to email you a confirmation of your plan’s terms and renewal reminders for website plans, and to handle refunds and billing questions.
• Notifications (push): if you turn on alerts, your iPhone or browser gives us a notification token (a random ID for that device) and we save it with your account. We use it only to send the price alerts and set reminders you asked for. On iPhone the notification goes through Apple’s push service, and in a browser through your browser’s push service. Turn alerts off in your iPhone Settings app or browser settings at any time. Tokens are deleted when they stop working or when you delete your account.
• Price alerts in the background: about every 30 minutes our server checks the alerts you set against the latest prices, even when the app or website is closed, so we can tell you when a card hits your price. It uses only your alert list and stored prices. It doesn’t track where you are or what else you do on your device.
• Sign in with Apple: if you choose it, Apple sends us a sign-in ID that only works for Collector Scan and the email you pick (it can be Apple’s private relay address). Apple also gives us a sign-in key, which we store encrypted and use only to tell Apple to cut the link between your Apple ID and Collector Scan when you delete your account.
• Photos: photos you upload to grade cards or share are processed on our servers. Photos you choose to share publicly are re-encoded to strip location and camera data.
• Feedback you send us, and basic server logs needed to run and secure the service.

Why we use it

To run your account and collection, show prices, run your subscription, send the emails and notifications you asked for (launch news, password resets, price alerts, set reminders), prevent abuse, and improve the app. We send marketing emails only if you opted in.

Account emails aren’t marketing. Emails that confirm your email address, reset your password, confirm an email change, or tell you about account security or deletion are transactional. We send them because you asked for them or because they’re needed to run your account, not to advertise, and they don’t need a marketing opt-in.

What we never do

We never sell your personal data or share it with advertisers.

Who processes it for us

These service providers process personal data on our behalf (as processors), only to run Collector Scan:

• Railway (United States): hosts the app, database and saved photos.
• Resend (United States): sends our transactional emails, such as email confirmation and password reset links. It handles your email address and the content of the email we send you.
• Google or Apple: handle sign-in, only if you choose “Continue with Google” or “Continue with Apple”.
• Apple (United States): takes payment for subscriptions bought in the iPhone app and delivers iPhone notifications (Apple Push Notification service). Apple’s own privacy policy covers your Apple ID and App Store purchases.
• RevenueCat (United States): keeps track of App Store subscriptions for us. It gets your Collector Scan account ID (a random ID, not your name or email), your purchase receipts from Apple, your App Store country, and basic device details (such as iOS and app version) needed to check purchases.
• Stripe (United States): takes payment for subscriptions bought on our website. It handles your payment details, email address and billing country.

Price data comes from a licensed price provider; we don’t send it your personal data.

Cookies

We use only cookies that are needed to keep you signed in and remember your settings. No advertising trackers.

Your choices

• Unsubscribe from any email using its link, or ask us to remove you from the waitlist.
• Export your collection anytime (Import & export).
• Turn notifications off in your iPhone Settings app or browser settings.
• Cancel an App Store subscription in the iPhone Settings app (tap your name, then Subscriptions). Cancel a website subscription anytime from Account → Manage subscription; cancellation takes effect at the end of your current paid period.
• Delete your account any time, on the website or in the iPhone app (Account, then Delete account): see how to delete your account. Deletion happens after a 7-day grace period, during which you can sign in and cancel. Deleting your account doesn’t cancel an App Store subscription, so cancel that in your iPhone Settings app too. A website subscription is cancelled for you when your account is permanently removed.
• Ask us for a copy of, or a correction to, your data.

How long we keep it

• Your account and collection: until you delete them or your account. Anything you delete is removed from our live systems right away and from our backups within 30 days. After you ask to delete your account, everything is permanently removed from our live systems when the 7-day grace period ends, and from our backups within 30 days after that.
• Card photos: as described in the scanner section above.
• Notification tokens: until you turn alerts off, the token stops working, or you delete your account.
• Subscription records: your plan details are deleted with your account. We keep a short record of each payment event (an ID, the type and the date, not your name or email) as long as we need it for taxes, refunds and fraud checks. Apple, RevenueCat and Stripe keep their own payment records as the law requires.
• Sign in with Apple key: deleted, and the link to your Apple ID removed at Apple, when you delete your account.
• Emails you send us: messages you send to help@collectorscan.app (including replies to our emails, which go there) or to privacy@collectorscan.app are kept in our mailbox only as long as we need them to answer you and keep a record of what we agreed, unless the law requires longer, and then deleted. You can ask us to delete them sooner.
• Email delivery records: our email provider keeps basic delivery records (recipient, subject, time and delivery status) for a limited time to make sure emails arrive and to stop abuse.
• Server logs: kept only as long as needed to run and secure the service.

Age

Collector Scan accounts are not intended for children under 13.

Contact

Email privacy@collectorscan.app for privacy and data requests. For anything else, email help@collectorscan.app, use the Feedback link in the app, or reply to any email from us.

Changes

If we change this policy we’ll update the date above, and we’ll email you about material changes.