Privacy Policy

What we collect

• Email address, if you sign in — either with Google sign-in or a one-time magic-link email. Google sign-in also gives us a Google account identifier, used only to recognize your account on return visits; we don't request your name, profile picture, or anything else from Google.
• Collection data you choose to save: cards you mark as a favorite, and cards you record as owned (grade, quantity, and an optional purchase price you type in yourself). This is tied to your account so it's there when you come back.
• Anonymous usage statistics, via Google Analytics, and a separate anonymous rate-limit identifier for the card-scan feature — neither is tied to your account or email.

We don't collect anything beyond this — no phone numbers, no physical addresses, no payment information (there's nothing to buy on the site).

How we use it

Your email and account identifier keep you signed in and let you use account features. Your saved collection data is used only to show it back to you. Usage statistics are aggregated, to understand which pages and features get used, at a level that doesn't identify you personally.

Third-party services

• Google — provides sign-in (Google OAuth) and Google Analytics (GA4), which we use for aggregate site-usage statistics. See Google's Privacy Policy.
• Cloudflare — hosts the site and the database where account and collection data is stored. See Cloudflare's Privacy Policy.
• Resend — delivers the one-time sign-in email if you use the magic-link option. See Resend's Privacy Policy.

What we don't do

• We don't sell your email address or any account data to anyone.
• We don't send marketing or newsletter email to your login email address — the only email you'll ever get from us is the one-time sign-in link, if you use it.
• We don't use ad networks, and we don't run any analytics or tracking tools beyond Google Analytics.

Cookies

• A session cookie keeps you signed in for up to 30 days.
• A small, non-sensitive cookie tracks whether you're currently signed in, so the site can show the right sign-in state without an extra check.
• If you sign in with Google, a short-lived cookie (about 10 minutes) secures that one redirect and is then deleted.
• If you use the card-scan feature, an anonymous cookie not tied to your identity enforces a daily usage limit.
• Google Analytics sets its own cookies to measure aggregate site usage. You can opt out of analytics on this device at /internal/ga-off/ — it disables Google Analytics here — and turn it back on at /internal/ga-on/.

Data deletion & contact

To ask about your data, request deletion, or ask anything else about this policy, email slabverdict@gmail.com.