Last updated: October 10, 2026
CardDex ("we," "us," or "our") is a trading card collection tracker and market intelligence platform. CardDex is available as a web application at carddex.gg and as a native iOS app on the Apple App Store.
CardDex is operated by CardDex Inc., a North Carolina corporation (SOSID: 3342658), located at 4030 Wake Forest Rd Ste 349, Raleigh, NC 27609.
Contact us at support@carddex.gg for any privacy-related questions.
Account data: When you create an account, we collect your email address, display name, and optional profile photo. If you sign in via Google or Apple, we receive your name and email from those providers — we never receive your passwords.
Collection data: Cards you add to your collection, including card IDs, conditions, grades, purchase prices, and notes you add. Sealed products, graded slabs, want lists, trade binders, tracked sets, and the daily value snapshots we compute from them.
Scan photos: When you scan a card, a graded slab, or a receipt, the photo is sent to a card identification service (see Section 3). We keep a private copy of the photo and the identification result while your account exists.
Buying Buddy: Which sites you pin to your Buying Buddy home screen, site requests you submit, and the photos you take when you tap Scan on a live stream (see Section 4).
Public profile: If you choose a username, your username, display name, bio, avatar, banner, pinned cards, social links, and collection highlights you make public are visible to anyone. Follow requests, follows, blocks, and reports you create are stored.
Payment data: Subscription billing is handled by Stripe (web) or Apple (iOS). We do not store your credit card number or full payment details. We store your subscription status, plan type, renewal date, and billing email.
Push notifications: If you allow notifications, we store the device token Apple gives us so we can deliver them. Turn them off in iOS Settings at any time.
Usage data: Which sets and cards you view, which features you use, session duration, and error events. This helps us improve the product.
Device and log data: IP address, browser or app version, device type, and timestamps collected automatically when you access the service.
This is the data practice we most want you to understand.
Buying Buddy opens live-auction sites and card marketplaces (for example Whatnot, eBay, TikTok Live, Fanatics Live, TCGplayer) inside the CardDex iOS app so you can check a card's value without leaving the stream. It is not a general web browser: it can only open sites on our published list.
We use your data to:
We do not sell your personal data. We do not use your data for targeted advertising. We do not track you across other companies' apps or websites.
Sign in with Apple: Apple may provide us with a unique identifier and optionally your name and email. You may choose to hide your email — Apple provides a private relay address instead. We respect this and use it only for account communications. We store the token Apple issues at sign-in so we can revoke it with Apple when you delete your account, as Apple requires.
Sign in with Google: We receive your name, email address, and profile photo from Google. We do not receive access to your Google account beyond basic profile information.
In both cases, we never receive or store your password. Authentication is handled entirely by Apple or Google.
CardDex integrates with the following services that may process your data:
Deleting your account: Settings → Delete Account (or email us). Your account is closed immediately and enters a 30-day grace period — sign back in within 30 days to restore it. After 30 days everything is permanently deleted: profile, collection, want list, scan photos and results, push tokens, pins, and your Sign in with Apple authorization is revoked with Apple. Web subscriptions are cancelled for you; Apple subscriptions must be cancelled in iOS Settings → Apple ID → Subscriptions.
Regardless of where you live, you can:
California residents (CCPA): You have the right to know what data we collect, request deletion, and opt out of sale. We do not sell personal data. Contact support@carddex.gg to exercise CCPA rights.
European residents (GDPR): You have the right to access, rectify, erase, restrict processing, or object to processing of your personal data. Legal basis: contract performance (providing the service), legitimate interest (service improvement, fraud prevention), and consent (scan photo storage, optional analytics). Contact support@carddex.gg to exercise GDPR rights.
CardDex is not directed to children under 13 (under 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages. Users must be at least 13 years old to create an account.
If you believe a child under 13 has created a CardDex account, contact us immediately at support@carddex.gg. We will verify and delete the account and associated data promptly.
We take reasonable measures to protect your data including encrypted connections (HTTPS/TLS), row-level security on our database, secure credential handling, and private storage buckets for scan photos (not publicly accessible). No system is 100% secure. Contact support@carddex.gg immediately if you suspect unauthorized access to your account.
Our web app uses functional cookies to keep you logged in (session token) and browser localStorage to remember UI preferences and consent flags. You can clear cookies and localStorage at any time via your browser settings — this will log you out.
Our iOS app uses on-device storage for your session, preferences, and a read-only token that lets the home screen widget show your collection value. Buying Buddy keeps third-party site logins in a separate on-device store. The iOS app does not use tracking cookies and does not request permission to track you.
We will update this policy as the product evolves. For significant changes (new data practices, new third-party services, changes to retention), we will notify you by email at least 14 days before the change takes effect. The "Last updated" date at the top reflects the most recent revision.
Questions or data requests: support@carddex.gg
We aim to respond within 5 business days.
CardDex Inc. — support@carddex.gg — carddex.gg
4030 Wake Forest Rd Ste 349, Raleigh, NC 27609