The short version
We collect the least we can, we never sell it, and it's yours to delete. Collect Valor is a card scanner and price checker. We need your email to know you're a member, and we keep the cards you choose to save. That's the heart of it.
- We do not sell or rent your personal information to data brokers or advertisers. The service providers and ad measurement tools below process information to operate the site.
- We use your email for membership and sign-in codes. Canceling does not automatically delete your account or saved data; email us to request deletion.
- Your card photos are used to identify the card. They're only stored if you save the card to your collection, and only shown to others if you put that card in your Showcase.
- You can delete your collection and your account any time by emailing us.
What we collect, and why
Here is everything, so there's no fine print to hunt for.
| What | Why | How long |
|---|---|---|
| Your email (members) | It confirms account access and receives your six-digit sign-in code, which expires after 10 minutes. We store a hashed code and attempt count for verification. | Until account deletion is requested and completed. Canceling alone does not erase it. |
| Cards you save | Your saved card details, current value, and the photo you scanned, so your private Collection page can display and update it. | Until you remove the card or request account deletion. Guests can remove their saved cards individually. |
| Card photos you don't save | Sent to OpenAI to identify the card, then shown back to you. We do not save it to your collection unless you choose to save the card. | Not saved to our collection storage; provider retention policies also apply. |
| Guest access identifiers | Your first 35 scans are free without an account. We use a hashed IP address as the scan counter and a separate scrambled browser identifier so the same browser can reopen its private saved collection. Neither value contains your email. | The scan counter and guest collection remain until removed under our retention process. Clearing browser data removes that browser’s access key but does not itself delete server-stored cards. |
| Collector profile and private back stories | Your chosen collector name appears with showcased cards. Optional acquisition details, amount paid, and personal notes stay private, even when a card is showcased. | Until edited or removed, or account deletion is completed. |
| Tester access and scan counts | Temporary sessions and daily usage counts enforce preview access and limits. Anonymous tester passes do not require a name or email. | Sessions expire with the pass; usage records remain until removed. |
| Private visitor notes | If you choose to leave a private note, we store what you write and any email address you voluntarily provide so we can understand and respond to feedback. We use a scrambled technical identifier only to limit spam. | Until no longer needed for product feedback, or you ask us to delete a note that identifies you. |
| Basic site analytics | Page views and feature activity such as scans, searches, saved cards, Watchlist use, Collection or Community visits, and account-access clicks. We use Plausible and HeyCatch to understand how the site is used. Journal pages also use Metricool to measure page visits. | Aggregate stats only. |
Payments are handled entirely by Stripe. We never see or store your card number.
What we never do
- Sell your email, your collection, or your card photos. Our service providers process the information needed for the features described here.
- Send marketing email you didn't ask for. If you get an email from us, it's about sign-in, your membership, or a request you sent us.
- Make your collection public. Only the individual cards you star into your Showcase appear in the Community binders — and you can un-star them any time.
- Ask for more than we need. The app does not require your real name, address, phone number, or social login. Your optional collector name appears with your Showcase; Stripe may request billing details.
The services that make the scanner work
A card scanner app needs a few partners. These are ours and what each one receives:
- OpenAI — identifies the card from your photo. We send photos and card-reading instructions through its API with response storage disabled. OpenAI’s own data handling and retention policies also apply.
- TCG API — provides Pokémon market prices and price history. It receives the card details (Pokémon name, set, number, and printing), not your account email or private back stories.
- Supabase — securely stores saved cards and photos in a private bucket that isn't publicly reachable.
- Netlify — hosts the site and processes requests, including IP addresses and technical request information.
- Resend — delivers sign-in codes to your email address.
- Stripe — processes membership payments.
- Plausible — cookieless, aggregate site and feature analytics, as described above.
- HeyCatch — site and feature-use analytics, as described above.
- Metricool — Journal page-visit analytics.
The Journal and outside links
You can read our Journal without signing in or submitting personal information. Journal pages use Metricool and HeyCatch to measure page visits. Netlify still processes page requests to deliver them. There are currently no reader comments or newsletter signup forms.
Articles and card results may link to other sites, including Pokémon, TCGplayer, and eBay. Those sites have their own privacy practices. We do not include your account email or private card stories in those links.
Storage on your device
Your browser stores your sign-in session or anonymous guest collection key, watchlist, and install preferences locally. The installed app caches pages and icons. Signing out removes the saved sign-in session. Clearing site data removes local settings and cached content, but does not delete server-stored cards or cancel a subscription.
Your controls
- Remove a card: open it in your Collection and tap Remove from collection. The photo is deleted with it.
- Leave the Showcase: un-star the card. It disappears from the Community binders immediately.
- Cancel membership: through Stripe, any time. This does not automatically delete your email, account, or collection.
- Delete everything: email info@collectvalor.com from your membership address and we'll erase your account, your collection, and your photos.
- Ask us anything: if a question about your data isn't answered here, ask. We'd rather explain than hide it in legalese.
The details
Children. Collect Valor is for collectors 13 and older. We don't knowingly collect information from children under 13.
Security. Saved cards and photos live in a private, access-controlled store; all traffic is encrypted; and only our own server functions can read your data. No system is perfect, but we've built this one to hold as little as possible so there's little to lose.
Changes. If this policy changes in a way that matters, we'll say so on this page with a new date. We won't quietly start doing something this page says we don't.
Contact. Questions or deletion requests: info@collectvalor.com.
UPDATED SEPTEMBER 19, 2026