Privacy Policy

The short version

• Where the app offers “Browse without an account”, you can use it without one. Your collection then stays on your device, and we never receive it.
• If you create an account, we keep your email address and what you choose to store with it — your collection, watchlist and profile — so it is backed up and on your other devices.
• We send marketing email only if you opt in, and you can opt out at any time. Usage statistics, too, are sent only if you turn them on, and never with your account.
• Nothing about you is public unless you join Social by choosing a handle and turning on “Show my profile in Social”.
• We don’t sell your personal information, we don’t show ads, and we don’t track you across other companies’ apps or websites.
• You can delete your account in the app at any time.

Features that are switched on from our servers — Sign in with Apple and Google, marketing email, usage statistics, Discord, eBay listings and grade estimates — are described here before they reach your app, so you can read about them in advance. If one works differently when it arrives, we will update this policy first.

Who we are

LegacyCollect is an app for cataloguing a trading card collection — Pokémon first, and other games where the app offers them — and seeing what it is worth. It is operated by [To confirm: operator’s legal name] (“we”, “us”), which is responsible for the information described in this policy.

You can reach us at support@legacycollect.app, or by post at [To confirm: postal address].

Using LegacyCollect without an account

When the app’s welcome screen offers “Browse without an account”, you can browse cards, sealed products and prices, and keep a collection, without creating one. Your collection, the profile picture you choose, your recent searches, the cards you viewed recently and your app preferences are then kept only in the app’s storage on your device. We don’t receive them, and deleting the app deletes them.

To show you cards and prices, the app asks our servers for catalogue and price information — or, when our catalogue is unavailable, asks TCGdex, a public card database, directly — and loads card and product images from the image services named under “Who else receives information”. Like any request over the internet, these requests carry your device’s IP address and what was asked for, such as the words of a search. We use your searches only to answer them; we don’t keep a record of what you search for.

If you create an account

An account backs up your collection, keeps it in step across your devices, adds a watchlist and lets you take part in Social. With an account, we collect:

• Account details — your email address, and how you sign in. With email, that is a password (kept by our sign-in provider in hashed form, never as readable text) or the one-time codes we email you. Where the app offers Sign in with Apple or Google, we receive from Apple or Google your email address (with Apple, it can be a private relay address Apple creates for you) and, the first time, the name you share; with Apple we also keep a token Apple issues, readable only by our servers, so that we can revoke your Sign in with Apple authorisation when you delete your account. We also keep a record of each signed-in session: when it started and was last used, and the IP address and device type it came from.
• Profile — the display name, handle and bio you choose to add, and, if you choose them, a collector title, the year you started collecting, up to three favourite sets and a showcase of up to six cards from your collection. A profile picture you choose from your photos stays on your device; it isn’t uploaded. If you choose a card as your picture instead, we keep which card it is and show that card’s catalogue image as your picture (see “Social”).
• Games you collect — your answer to “Which games do you collect?” when you first sign in, which you can change later.
• Badges — the milestones our servers award your account (such as how long you have been a member, reports you sent that we fixed, appreciation from other collectors, weeks you took part, and how many different printings you identified with the scanner), with the evidence each was awarded on, and which printings you identified with the scanner, so they count once; and badges our team gives by hand, for example for taking part in an event, with the reason recorded.
• Preferences — the currency you choose to see values in. To convert values, the app asks our servers for the European Central Bank’s reference rates of the days involved (such as the days you bought something); our servers fetch those rates from the European Central Bank, which receives nothing about you.
• Your collection — the cards and sealed products you add, with the quantity, condition and grading details you record (grading company, grade and certification number), what you paid (and in which currency) and when, and any notes. If your device already holds a collection when you sign in, the app asks before adding it to your account.
• Your watchlist — the items you watch and their value when you added them.
• Plan and usage — which plan your account is on, and how many grade estimates you have used, so plan limits can be applied.
• Reports you send us — when you tap “Something wrong here?” on a card, product or set, or on a scan result: the item, the kind of problem and anything you write, with what the screen showed so we can find the mistake — which screen it was, the printing, the address of the catalogue picture shown and the price shown; for a scan, the text the scanner read off the card (at most 120 characters), how confident the match was, which matches it offered and which you picked; and the app’s version, build and platform. Never a photo or screenshot.

We use your email address to create and secure your account, to send the codes you ask for (to confirm your account, sign in or reset your password), and to write to you about your account, a request you made or an important change to our terms or this policy. We send marketing email only if you ask for it, as described under “Marketing email”. If you email us, we keep your message and address for as long as we need to deal with it and any follow-up.

Social

Social is optional. Nothing about you is shown to other people unless you choose a handle and turn on “Show my profile in Social”. When you do, the following become public — visible to anyone who uses LegacyCollect, including people who aren’t signed in:

• your handle, display name, bio and level, when you joined, and the card you chose as your profile picture, if you chose one;
• the collector title, the year you started collecting, your favourite sets, the games you collect and your badges (except the private scanner badge), and — only if you also turn on your showcase — the cards you pinned to it (never what they are worth, what you paid or how many you have);
• how many posts, followers and appreciations you have, and how many collectors you follow;
• your posts — the catalogue cards or products each one shows, and the title, caption, grade and “how I got it” you add. Posts show catalogue images, never your own photos.

Your collection, what you paid and what it is worth are not shown on your public profile — only the showcase cards you choose to pin, if you turn the showcase on. Who you follow, and who follows you, is visible only to you and the other collector; everyone else sees the counts. People see how many appreciations a post has, not who gave them. Blocks and reports are private: we never tell anyone who blocked or reported them.

To run Social we also record when you accepted the Community Guidelines and which version; keep a private record of the activity that earns your level (such as completing your profile, active weeks and appreciation your posts receive); and log your follows and appreciations for a week to enforce limits on how often they can happen. When you report a post or a profile, we record which one, the reason, anything you write and that the report came from your account. We review reports, and we can hide posts or remove a profile from Social; we keep a record of those decisions.

Turning “Show my profile in Social” off removes your profile and your posts from Social; those posts don’t come back if you turn it on again. A post you delete leaves Social at once. Deleted and hidden posts stay on our servers, visible only to our moderators, until your account is deleted, so that reports about them can still be reviewed.

Scanning, grade estimates and your photos

LegacyCollect uses your camera only while you are scanning a card or photographing one for a grade estimate, and you can allow or remove camera access at any time in your iPhone’s Settings. It receives a photo from your library only when you choose one: to scan a card, through the system photo picker, which needs no permission and gives the app only that photo; or as your profile picture, with the photo-library permission you can also change in Settings.

Scanning. When you scan a card — with the camera, or from a photo you choose — the app reads the text printed on it (such as its name, number and set code) on your device. While the scanner is open, it can take still pictures by itself, without a shutter sound, so that it reads a card as soon as you hold it steady; you see the camera’s view the whole time, and it stops when you leave the scanner. Only the text read from a picture is sent to our servers to look up matching cards; the pictures themselves stay on your device and are never uploaded. When you are signed in and keep a scanned card, we record which printing it was, for the scanner badge.

Grade estimates. If you start an AI grade estimate, the photos you take for it (the front and back, and any close-ups you add) are uploaded to private storage in your account, together with the card you chose. The analysis is not switched on yet, so no photo has been sent to Anthropic. Before we switch it on, we will update this policy to say how long Anthropic keeps the photos it receives, and the app will ask your permission before any photo is sent to Anthropic, whose AI model analyses the photos, with the card’s name and set, and returns an estimate that we keep with your account. These photos are never public. We keep them — including photos from a request that didn’t finish — until you delete your account or ask us to delete them at support@legacycollect.app.

Marketing email

We send LegacyCollect news — new features, collecting tips and occasional offers — only to accounts that turn it on in Settings. It is off unless you turn it on, and only an account with a confirmed email address can turn it on. When you do, we record that you agreed, when, where in the app, the exact words you agreed to, and a one-way code of the address you agreed for, so a new address isn’t subscribed until you agree again. We choose who receives each email from your account’s plan, recent activity, the games you collect and your display currency.

Every marketing email has an unsubscribe link that works with one tap, even after your account is gone, and you can turn the emails off in Settings at any time. To make sure we never email an address that unsubscribed, bounced or complained, we keep a one-way code of that address — never the address itself — for as long as we send email. For each email we record whether it was delivered, bounced or marked as spam, and which link was tapped (without the rest of the web address); we keep those records for up to 400 days. We don’t track whether you open an email.

Marketing email, and the email confirming that a deleted account has been erased, are sent for us by Resend, which receives your address and the email’s content. When you delete your account, we ask Resend to delete your contact: until it confirms — at most 30 days — we keep your address only for that purpose.

Linking Discord

Where the app offers it, you can link your account to Discord to join our Discord server and receive roles that match your badges and plan. You sign in to Discord, which tells us your Discord user ID; we keep only that ID and which of our roles our bot has given it — not your Discord name, picture, email or messages. Discord’s access token is used once, to confirm the account is yours and add you to our server, and then revoked and discarded. You can unlink in Settings at any time; when you unlink or delete your account, our bot removes the roles it gave, and we keep the record of those roles only until they are removed. Discord’s own privacy policy applies to your use of Discord.

Market prices and listings

The prices in LegacyCollect are market data about cards, not information about you. They come from TCGplayer’s Market Price (read through TCGCSV), Cardmarket and TCGdex. We keep each day’s reading as price history, with no end date; our records begin on 18 September 2026.

eBay listings. Where the app shows eBay listings for a card, our servers ask eBay for listings using only catalogue facts about the card (such as its name, number and grade) — never anything about you — and keep what a listing shows for up to six hours. Your device then loads the listing pictures directly from eBay, so eBay receives your IP address and the picture requested. These are affiliate links: if you buy through one, we may earn a commission. We count taps on them as anonymous daily totals for each card, with no account or device identifier, keep the totals for 90 days and never send them to eBay.

Subscriptions and payments

LegacyCollect Pro is sold through Apple’s App Store, and Apple processes the payment. We never receive your card number or other payment credentials. We do receive details of subscriptions, from the app and from Apple: which plan, Apple’s transaction identifiers, and the subscription’s status, renewal and expiry dates. When you are signed in, we keep them with your account so that it gets what you paid for, and so we can help if something goes wrong.

Usage statistics

Where the app offers it, you can choose to share usage statistics in Settings. It is off unless you turn it on. When it is on, the app counts on your device how often its screens and actions are used each day (such as card and product pages, searches, scans, grade requests, adds to your collection and watchlist, and posts), and which cards and products were viewed most and which search results were opened, by catalogue identifier only. Once a day it sends those totals to our servers as one batch, with the app’s version and your device’s platform — never with your account, a device identifier, what you typed, your collection or what you paid. We keep the daily totals for 13 months. To stop abuse, our servers keep a one-way code of the IP address a batch came from for up to two hours. Turning it off stops sending at once and deletes the totals not yet sent.

Diagnostics and app updates

Error reports. When the app runs into an error, it sends us a report about it: the error’s name and message, where in the app’s code it happened, the kind of screen that was open (never which card or collector it showed), whether the app had to close, the app’s version and update, and your device’s platform and operating-system version. The app sends these reports without your sign-in, so they aren’t linked to your account. They describe the error, not your content — though an error message can occasionally include a piece of text involved in the error — and before a report is stored we remove anything that looks like an email address, a sign-in token, a long number or the path of a web address. We keep them for up to 90 days. Separately, if an action on your account fails on our servers — an account deletion that couldn’t finish, for example — we log that error with your account’s identifier so we can put it right.

App updates. Each time it starts, the app asks Expo’s update service whether a newer version of its code is available. That request includes a random identifier created for this installation of the app (not linked to your account), the app’s version and update channel, your device’s platform and — if the app failed to start the previous time — a short description of that error, as the app recorded it.

Apple. If you have chosen in your iPhone’s settings to share analytics with app developers, Apple may share crash reports and usage statistics about LegacyCollect with us, under Apple’s privacy policy.

We don’t use advertising or third-party analytics tools. Beyond the diagnostics described here, the account, badge and Social activity described above, the usage statistics you choose to share and the anonymous eBay tap totals described under “Market prices and listings”, we don’t record what you do in the app. From the records we already hold, we count totals such as how many scans found a card, how many subscriptions started or ended and which app versions signed-in accounts use (a version used by fewer than five accounts isn’t counted); those totals never describe one person. Messages we show on Home are chosen only by whether you are signed in and which plan you have; whether you saw or dismissed one is kept only on your device.

Who else receives information

We don’t sell your personal information, and we don’t share it for advertising. It goes to others only as this section describes.

Service providers run parts of LegacyCollect for us and process personal information on our behalf, under terms that limit their use of it to providing their service to us and require them to protect it. We choose providers whose protections meet the standard of this policy:

• Supabase hosts our database, sign-in, file storage and server functions. All the account information described here is stored with Supabase, on servers in the United States (Northern California). Account emails are sent through Supabase or an email delivery service working for us.
• Expo (650 Industries) delivers app updates, as described above.
• Anthropic analyses the photos for grade estimates — only once that service is switched on, and only for estimates you have given permission for.
• Resend sends marketing email to accounts that asked for it, as described under “Marketing email”.

Sign-in and linked accounts. If you sign in with Apple or Google, or link Discord, that company confirms who you are to us, under its own privacy policy. When you delete your account, we ask Apple to revoke your Sign in with Apple authorisation.

Apple distributes the app and processes App Store payments as an independent company, under its own privacy policy.

Image and card services. Your device loads card and product images directly from TCGdex and TCGplayer (and, for Magic: The Gathering where the app shows it, from Scryfall), as well from our own storage, and eBay listing pictures from eBay where listings are shown; when our catalogue is unavailable, it asks TCGdex for card information directly. These services receive your IP address and what was requested — an image, a card or the words of a search — and nothing about your account.

Links to other sites — marketplace listings, grading companies’ websites, Apple’s subscription settings — open outside LegacyCollect, and those sites’ own policies apply.

Legal and safety. We may also disclose information when the law requires it; to protect the safety, rights or property of our users, the public or us; or to investigate abuse. If LegacyCollect is sold or reorganised, your information may pass to the new operator, who must continue to honour this policy.

How long we keep it, and deleting your account

We keep your account information for as long as you have an account. You can remove items from your collection and watchlist, delete your posts and change your profile at any time.

Deleting your account. Open your profile, tap “Settings and account” (or the gear), then Delete account. If you haven’t signed in recently, the app may first ask you to confirm it’s you — with your password, a code we email you, or Apple or Google if that is how you sign in. When you confirm:

• straight away, you are signed out on this device, every other device loses access within an hour at most, and the account can no longer be signed in to; your display name, bio and settings are cleared; your public profile and posts leave Social; the photos you uploaded for scans and grade estimates are deleted; we ask Apple to revoke your Sign in with Apple authorisation, if you used it; and we ask Resend to delete your email contact, if you had one there;
• after 7 days, your account and everything in it is permanently deleted: your sign-in details, collection, watchlist, profile and handle, games you collect, badges, posts, follows, appreciations, blocks, the reports you made about posts and profiles, grade estimates, scans, usage records, marketing-email agreements and your Discord link (our bot also removes the roles it gave). Until then, write to us if you change your mind and we may be able to restore it.

Some records outlast the account, for the reasons given:

• App Store subscription records — the details Apple sent us about a subscription (Apple’s transaction identifiers, the product, its dates and status) are no longer linked to your account in our records, but are kept, so that we can honour refunds and renewals Apple tells us about, let the subscription be restored to a new account, and resolve disputes. Apple’s identifiers can still connect them to the same Apple ID. We don’t yet delete them on a schedule; ask us at support@legacycollect.app and we will delete them once no refund, renewal or dispute can still depend on them.
• Badge records — our log of badges awarded, suspended or revoked, and of staff decisions about them, keeps your account’s identifier, though the account it named no longer exists; a badge another collector earned from your appreciation keeps that it counted. We keep them as the audit trail for badges.
• Reports and errors — reports you sent about prices or card details keep what you wrote but lose your account identifier; we keep them to correct the catalogue. Error logs about your account lose its identifier; we keep them while they help us fix problems.
• Moderation — reports other collectors made about your posts or profile, and our moderation decisions, keep the identifier of what was reported and what was written about it; we keep them to keep Social safe and to handle disputes.
• Email — if you unsubscribed, or an email to you bounced or was marked as spam, the one-way code of that address stays on our do-not-email list, and the records of emails we sent you keep that code without your account. Your address itself is kept only until Resend confirms it has deleted your contact, at most 30 days.
• Deletion confirmation — when the 7 days are over and your account has been erased, we keep its email address for one purpose only: to send you one email confirming that the deletion is complete. We delete the address as soon as that email has been sent, and in any case 14 days after the erase.

Deleted information can also remain for up to 30 days in our hosting provider’s backups and service logs, until they expire.

Deleting your account doesn’t cancel an App Store subscription — cancel that in your Apple ID settings. Information stored only on your device is deleted when you delete the app.

Your choices and rights

• See and correct your profile, collection and watchlist in the app at any time.
• Delete items, posts or your whole account in the app, as described above.
• Get a copy of the information in your account: there is no export button yet, so email us from the address on your account and we will send it to you in a common machine-readable format.
• Leave Social by turning off “Show my profile in Social”.
• Stop marketing email with the unsubscribe link in any marketing email, or in Settings.
• Unlink Discord in Settings.
• Stop usage statistics by turning them off in Settings.
• Camera and photos: allow or remove camera and photo-library access in your iPhone’s Settings (a photo you choose in the system photo picker doesn’t need it). Removing access doesn’t delete grade-estimate photos already uploaded — ask us to delete those, or delete your account.

Depending on where you live, you may have further rights over your personal information — to access, correct or delete it, to receive a copy of it, to object to or restrict how we use it, and to withdraw consent — and the right to complain to a data protection authority. To use any of them, email support@legacycollect.app. We will answer within 30 days, may need to confirm that the request comes from you, and will never treat you differently for using your rights.

In the European Economic Area and the United Kingdom, we use your information to provide the app and your account as you ask (performance of a contract); to keep LegacyCollect secure, prevent abuse, moderate Social and fix errors (our legitimate interests, which you can object to); with your consent, where we ask for it; and where the law requires it. Our servers are in the United States. Where the law requires a safeguard for sending your information there, we use one — such as standard contractual clauses, with the UK addendum, in our providers’ data processing terms — and you can ask us for details.

In California, you have the right to know what personal information we collect and how we use it (this policy sets it out), and to ask us to delete or correct it. We don’t sell or share personal information as the California Consumer Privacy Act defines those terms.

Security

Everything the app sends travels over encrypted connections (HTTPS). Database rules keep your private information to your own account; beyond that, only the people who run LegacyCollect can reach it — to operate the service, give support or moderate Social — and our service providers process it as described above. Your photos are kept in private storage, never public. Passwords are stored only in hashed form, and your sign-in session is kept in the app’s private storage on your device.

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Children

LegacyCollect isn’t directed to children under 13, and we don’t knowingly collect personal information from children under 13. You must be at least 13 to create an account — or older, if the law where you live requires it. If you believe a child under that age has given us personal information, email support@legacycollect.app and we will delete it.

Changes to this policy

We will update this policy when what LegacyCollect does with information changes. The current version is always in the app and at legacycollect.app/privacy, with its date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Contact us

Questions, requests or complaints about privacy: support@legacycollect.app. By post: [To confirm: operator’s legal name], [To confirm: postal address].