Privacy

What we collect

• Account: your email address, a password (stored only as a secure hash by our database provider) and an optional display name.
• What you add: My Cards (cards, grades, quantities, purchase prices, notes), price alerts and, if you sell, your seller profile and listings.
• Problem reports: the message you send, the page you were on, your browser type and a one-way hash of your IP address (used only to stop spam).
• Emails we send: a record of price-alert emails so we don't send too many.
• Account activity: a security log of what happens with your account (signing in and out, changes to My Cards, lists, alerts, folders and settings), with the time, never your password or the content of what you write. You can see your own under Account → Account history. It's deleted after a year by default.
• Error reports: when a page breaks, the error message, the page address (without anything after the "?"), your browser type and, if you're signed in, your account id, so we can fix it. Email addresses and long numbers are removed from messages, and only a one-way hash of your IP address is kept (to stop floods). Deleted after 90 days by default.
• Links to eBay: they're affiliate links (eBay Partner Network), so we may earn a commission if you buy. When you click one we count the click by date, link type and card, without anything that identifies you. eBay may set its own cookies once you're on its site. If you're signed in, we also save the eBay listing you opened (the card, the listing's title and asking price, and when) to your account so we can ask whether you got the deal and, unless you opt out, email you a reminder; you can see it, delete it or turn it off on your account page, and it's deleted after 90 days.
• Visit statistics: which pages are opened, for how long, the site that sent you, your device type and browser, and your approximate location (country, region and city, from the network). We don't use cookies for this or store your IP address. Visits are grouped under an anonymous id that changes every day, so we can't recognize you on another day, look you up, or link visits to your account. These statistics are deleted after 180 days. If your browser sends Global Privacy Control, your visits aren't counted.

We don't sell your data, and we don't use advertising or tracking cookies.

Who processes it

We use a small number of service providers who process data only on our instructions:

• Database and sign-in provider: stores your account and the things you add.
• Website hosting provider: serves the site and keeps short-lived technical logs.
• Background-jobs provider: runs our price collection (it doesn't handle your personal data).
• Email provider: sends price-alert emails, if you set alerts.

They're bound by data-processing terms, and some may process data outside your country under standard contractual protections. Ask us for the current list of providers at any time.

What's public

Your collection and alerts are private to you. If you create a seller profile, its name, bio, website and active listings are public so buyers can find you.

Why we use it

• To run your account and the features you use (My Cards, alerts, seller pages): needed to provide the service you asked for.
• To keep the site safe and stop spam: our legitimate interest in protecting the service.
• Asking whether you got a deal you opened on eBay: to provide that feature, which you can turn off at any time.
• Anonymous visit statistics, to see which pages help people: our legitimate interest in improving the site.

We keep account data until you delete your account. Problem reports are kept until they're resolved and then deleted within a year. Visit statistics are deleted after 180 days.

Children

Pokedeck isn't directed at children under 13, and you must be 13 or older to create an account. We don't knowingly collect personal information from children under 13. If you believe a child has given us information, contact us (Report a problem at the bottom of any page) and we'll delete it.

Your rights

Depending on where you live, you have the right to:

• know what personal information we hold about you and get a copy;
• correct it or have it deleted;
• opt out of the sale or sharing of your personal information and of targeted advertising (see Your Privacy Choices; we also honor Global Privacy Control);
• withdraw consent at any time, object to processing, and complain to your data protection authority (EU, EEA and UK).

This covers California (CCPA/CPRA), other US states with privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon), and the EU/UK GDPR. We don't sell personal information for money, and we won't treat you differently for using your rights. To make a request, use your account page or contact Report a problem at the bottom of any page. We may need to confirm it's you, and we answer within the time the law sets (usually 30 to 45 days). You can appeal a decision by replying to our answer.

Your choices

Change your name on your account pageaccount page. You can delete your account there too: that removes your account, My Cards, alerts and seller data straight away. For anything else, use Report a problem at the bottom of any page.