Privacy Policy

What we collect

When you create an account, we store the email and password you sign up with (handled by our authentication provider, Supabase — we never see or store your password in plain text), plus whatever profile info you choose to add: username, display name, bio, and avatar image. Your collection data (the items you add, their details, and any photos/cover art URLs you provide) is stored the same way.

Cookies

We use a session cookie to keep you signed in — that one's required for the site to work and isn't optional. If you accept the ads cookie banner, Google AdSense also sets cookies to serve and personalize ads; you can decline that banner and the site will still work normally, just without personalized ads.

Third-party services

This site relies on a few external services to work:

• Supabase — hosts our database, authentication, and file storage (avatars).
• Google AdSense — serves ads, if you've accepted the cookie banner. Google's own privacy policy covers what they do with ad-related data.
• IGDB / Twitch, eBay, Open Library, UPCitemdb, the Pokémon TCG API, and Scryfall — used for auto-fill and price-lookup features. When you use Search, Scan, or Check eBay price, the search term or barcode you're looking up is sent to the relevant service to fetch results. No account or personal information is sent along with those requests.

Public vs. private data

Your profile defaults to public — your collection, follower/following lists, and comments are visible to anyone. You can switch your profile to private in Profile Settings at any time, which hides your collection and removes it from the leaderboard (your username and the fact that you have an account may still be discoverable).

Your data, your choice

Want your account or data deleted, or have any other privacy question? Reach out at taylorbobbysaunders@outlook.com and we'll take care of it.