Privacy Policy

CollectorDex is an early platform. This privacy policy is written to explain the current service clearly and may be updated as features evolve. It is not a substitute for independent legal advice.

Information we collect

If you create an account, Supabase Auth stores authentication details such as your email address. If you subscribe, Stripe handles billing details and sends CollectorDex subscription status information. If you choose to join the CollectorDex newsletter, CollectorDex stores your newsletter preference and consent details.

If you use collection and wishlist features, CollectorDex stores the collection names, card records, quantities, notes, purchase notes, storage locations, grading records, wishlist details, and analytics snapshots you choose to save.

Private by default

Collections, wishlists, notes, purchase details, storage locations, grading records, analytics, billing status, and newsletter preferences are private unless you explicitly share selected collection information through public sharing.

Public collection sharing is off by default. When you turn it on, it creates a read-only public page that anyone with the link can view, and you can disable that link again. Private notes, purchase details, storage locations, grading certification numbers, slab notes, wishlists, billing, account, newsletter, and analytics data are not included in public shared pages.

Data protection and security

CollectorDex is designed to keep your collection data private by default. We use trusted hosted providers for authentication, database storage, payments, email, hosting, and analytics. Data is protected in transit using HTTPS/TLS and stored data is encrypted at rest by our infrastructure providers. We also use access controls, authentication, and row-level security to restrict access to user-owned data.

No online service can guarantee absolute security or permanent data preservation. CollectorDex takes reasonable steps to protect user data, but you should keep independent records of important collection information.

Newsletter updates

Newsletter signup is optional and uses a single explicit opt-in. CollectorDex does not subscribe users automatically during account creation. Newsletter contacts are sent server-side to Brevo using the configured CollectorDex newsletter list, and you can turn newsletter updates off from your account preferences.

Contact messages

Contact form submissions are sent to CollectorDex through Brevo Transactional Email. Messages are used to respond to your request and are not sold.

Cookies and local storage

CollectorDex uses essential storage for sign-in, security, theme, currency, cookie preferences, and service functionality. Optional analytics storage is not used until you allow analytics cookies, and you can change your cookie preference from the site footer.

Card searches

Card lookup requests are processed server-side so the browser does not call card, pricing, or currency providers directly.

Analytics

Google Analytics is used only when analytics consent is granted. Rejecting non-essential cookies keeps Google Analytics disabled on future visits unless you update your preference.

Payments

CollectorDex does not store payment card details. Stripe is the source of truth for billing, discounts, renewals, and subscription state. Cancelling or downgrading Premium does not delete your collection data solely because your subscription ends. Existing account data remains associated with your account unless you delete it or request account deletion, subject to applicable retention needs.

Exports

You can export collection data for your own records. CSV exports are generated on demand, require sign-in, and are not emailed or stored as long-term export files by CollectorDex. CSV exports may contain private information, especially if you choose a full export, so store downloaded files carefully and only share them with people you trust.

Pricing and providers

Card data, images, pricing, exchange rates, payments, email, hosting, analytics, and database infrastructure are provided through trusted third-party services. Pricing values are estimates and may be incomplete, delayed, unavailable, inaccurate, or change over time.