Last updated: March 3, 2026
Account information: When you sign in via Google or Apple, we receive your name, email address, and profile photo as provided by the authentication provider. We do not receive or store your password.
Card scan images: Images you upload or capture for card scanning are processed to identify cards. We may temporarily store images for processing but do not permanently retain scan images unless you save a card to your collection.
Collection data: Cards you add to your collection, marketplace listings, and transaction history are stored in our database.
Usage data: We collect basic analytics including pages visited, features used, and device type to improve the Service.
Affiliate click data: When you click affiliate product links, we record the click for commission tracking purposes.
We use your information to: (a) provide and improve the Service; (b) identify cards and display pricing; (c) facilitate marketplace transactions; (d) track affiliate commissions; (e) communicate service updates; (f) prevent fraud and abuse.
We do not sell your personal information. We may share information with: (a) other users as part of marketplace interactions (e.g., your username and rating); (b) third-party service providers who assist in operating the Service (hosting, analytics); (c) Amazon and other affiliate partners (anonymized click/purchase data); (d) law enforcement when required by law.
We use industry-standard security measures to protect your information, including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and encrypted data storage. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
PokeScan integrates with third-party services including Google Sign-In, Apple Sign-In, Stripe (payment processing), the Pokemon TCG API, TCGPlayer, Cardmarket, and Amazon Associates. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.
Payment processing: Payments for premium subscriptions are processed by Stripe. We do not store your full credit card number. Stripe collects and processes payment information in accordance with their privacy policy and PCI-DSS standards.
We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. Affiliate links may contain tracking parameters. You can manage cookie preferences through your browser settings.
PokeScan is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Parents or guardians who believe their child has provided information should contact us.
Depending on your jurisdiction, you may have the right to: (a) access your personal data; (b) correct inaccurate data; (c) delete your data; (d) export your data; (e) opt out of marketing communications; (f) restrict processing of your data. To exercise these rights, contact us at privacy@pokescan.app.
California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information (we do not sell personal information).
EU/EEA Residents (GDPR): Our legal basis for processing is consent (for account creation) and legitimate interest (for service improvement). You may withdraw consent at any time by deleting your account.
We retain account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records). Anonymized analytics data may be retained indefinitely.
PokeScan uses artificial intelligence to identify Pokemon cards from images and estimate card conditions. These automated processes are used to assist you and do not make legally binding decisions. AI-generated results (card identification, condition estimates, and pricing suggestions) are informational only and should be independently verified before making purchase, sale, or insurance decisions.
In the event of a data breach that compromises your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable laws (including GDPR Article 33). Notification will be provided via email and/or a prominent notice on the Service, and will include the nature of the breach, data affected, and steps being taken to address it.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email. Continued use after changes constitutes acceptance.
For privacy-related questions or requests, contact us at privacy@pokescan.app.