CardDex ("we", "us", "our") is a Pokémon card collection tracking tool available at carddex.gg. We take your privacy seriously. This policy explains what information we collect, how we use it, and your rights.
Information We Collect
When you sign up:
Email address
Name and profile picture (if you sign in with Google)
Username you choose
When you use the app:
Cards you mark as owned or wanted
Collection value history
App preferences and settings
We do not collect payment information, browsing history, or any data beyond what is needed to run the app.
How We Use Your Information
To provide and improve the CardDex service
To save and sync your card collection across devices
To send occasional product updates (only if you opt in)
To identify your account and keep it secure
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Data Storage
Your data is stored securely using Supabase, a cloud database platform with industry-standard encryption at rest and in transit. Authentication is handled by Supabase Auth.
Third-Party Services
We use the following third-party services:
Supabase — database and authentication
Google OAuth — optional sign-in method
Pokémon TCG API — card data and images (no personal data shared)
Vercel — hosting and deployment
Your Rights
You can:
Access or export your collection data at any time
Delete your account and all associated data by contacting us
Opt out of marketing emails via your account settings
Children's Privacy
CardDex is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.