Card Comp — Privacy Policy
Effective date: October 6, 2026
Card Comp ("we", "us") is a pricing tool for trading-card vendors and collectors, available at
www.cardcomp.app, at
app.cardcomp.app, and through our iOS and Android apps.
This policy describes what information we collect, who receives it, how long we keep it, and how
to delete it.
Information we collect
- Account information. Anyone can create an account by signing in with
Apple, with Google, or with an email address and password. We receive your email address
and, where the sign-in provider shares it, your name. With Sign in with Apple you may choose
to hide your email, in which case we receive an Apple relay address instead. With Google we
also receive your profile photo. You may optionally add a phone number and a business name.
- Card records. When you scan or look up a graded card or a sealed product we
record the lookup — the grader, certificate number or barcode, the card or product
identified, and its estimated value at the time — against your account.
- Collections, lists, and trades. The collections, buy and sell lists, and
trades you build, including the prices and offer percentages you set.
- Payment handles and deal records. If you use the payment features, the
payment handles you enter (for example a Venmo, PayPal, or Cash App username, or the email
or phone number you use with Zelle), the records of the deals and payments you log, and,
if you enter them on a payment, the name, contact details, and payment handle of the person
you dealt with. Only enter details the other person is happy for you to record. Card Comp
never processes, holds, or transmits money, and never receives your bank or card
details.
- Camera. The camera is used to read graded-card labels and sealed-product
barcodes. Text recognition and barcode reading run on your device; camera
frames and photos are not uploaded, stored, or shared. Only the details read
from the label or barcode (such as the grader, certificate number, and card name) are sent
to our servers to identify and value the item. The web version has no camera access.
We do not collect your location, contacts, or browsing history, and the apps contain no
advertising, analytics, or crash-reporting SDKs.
How we use it
- To operate the service: authenticate you, identify and value cards, show you your own scan
history, collections, lists, trades, and price history, and apply your plan's limits.
- To administer accounts and respond to your requests.
- To build anonymous market price history: each valuation adds a price point for that card
(card identity, price, date — nothing about who scanned it), which is how the price charts
are drawn.
Who receives information
We do not sell your personal information or use it for advertising. We use the following
service providers to run Card Comp:
| Provider | What it does | What it receives |
| Supabase | Sign-in and database | Your account information and everything
you store in Card Comp |
| Railway | Hosts our API server | Requests from the app, including your card
lookups, while they are processed |
| Vercel | Hosts this website and the web app | Standard web request data
(such as IP address and browser type) |
| Our pricing service | Card identification and market estimates | Card
details only — certificate number, grader, grade, and card identity. It queries market data
sources such as Card Ladder, Alt, and eBay sales data with those card details. It does not
receive your name, email, or account identifiers. |
| PSA, CGC | Certificate lookup | A certificate number only, and only when
the label read on your device is not enough to identify the card. The lookup comes from our
servers, not your device. |
| Apple, Google | Sign-in, if you choose them | Handled under Apple's and
Google's own privacy policies |
Sealed-product prices come from public TCGplayer market data published by tcgcsv.com. We
download that data; nothing about you is sent to it. Opening a payment link hands off to the
payment app you chose (for example Venmo), under that app's own privacy policy. We may also
disclose information when required by law.
Data access and isolation
Your scan history, collections, lists, trades, and payment records are visible only to your
account and to Card Comp administrators. Other users cannot see your data, except what you
choose to share (for example an exported list).
Data retention and deletion
- While your account is active, we keep your account information and the
records you create so the service can show them to you.
- Delete your account in the app at Settings → Delete
account, or email admin@cardcomp.app from
the address on your account. Full details are on our
account deletion page.
- Deleted immediately from our live database: your sign-in account, profile
(name, email, phone, business name, profile photo), scan history, lists, collections,
trades, payment handles, payment and deal records (including any names, contact details,
and payment handles of the people you dealt with), exports, and any image reports you
made.
- Retained: anonymous market price points — a card, a price, a source, and a
date — are kept indefinitely, because they make up every user's price charts. They never
recorded who scanned the card, so they cannot be linked back to you.
- Retained: certificate lookups — a grading company's certificate number and
the card it identifies, as the grading company reports it — are kept as shared reference
data, so the next scan of the same slab is identified without asking the grading company
again. They hold no account, user, or scan reference and are not deleted with an account.
A certificate number is printed on the slab and moves with the card from owner to
owner.
- Earlier app versions. Before October 2026, deleting an account kept card
records with the link to the account removed, and the delete confirmation in app versions
up to 1.4.0 still describes it that way. Deleting an account now deletes those records as
listed above, whichever app version you use.
- Backups and logs: copies in our providers' routine database backups and
operational logs expire on their normal schedule, no later than 30 days after deletion.
Children
Card Comp is intended for adults (18+) and is not directed to children. We do not knowingly
collect information from anyone under 18.
Your choices
You can export your lists as CSV and delete your account at any time from the app. To ask
what we hold about you, to correct it, or for any other request, email us.
Contact
Questions or requests: admin@cardcomp.app
We may update this policy as the product evolves; the effective date above
reflects the latest revision. See also our Terms of Service.