Privacy Policy

Information from the account you sign in with

You can create an account with an email address and password, or by signing in with Google or Facebook. When you use Google or Facebook, that provider sends us a limited set of profile information. We request only:

• Your account identifier at that provider, which is specific to this app
• Your name and profile picture
• Your email address

We never receive your password at Google or Facebook, your friend or contact list, or your posts. Signing in this way does not let us post anything on your behalf. You can revoke this access at any time: on Facebook under Settings › Apps and Websites, and on Google under your Google Account’s security settings.

If you sign up with a password instead, we store your email address and a one-way hash of your password. We cannot read your password.

Information you provide to the Service

The Service exists to track a card collection, so it stores:

• Cards in your inventory, including quantity, condition, grading details, purchase prices, and the sale and trade records you enter
• Files you import, such as CSV or spreadsheet exports from other collection tools, and the parsed results
• Your profile, if you create one: store name, avatar image, bio, specialties, and city and region
• Messages you send to other users, offers you make or receive, and the shows and events you mark yourself as attending

Some of this is visible to other users by design. Your profile visibility setting controls who can see your profile, and any message or offer you send is visible to its recipient. Your inventory, purchase prices, and sale records are not shown to other users.

Information collected automatically

Our servers record basic technical information when you use the Service, including IP address, browser type, and timestamps of requests. This keeps the Service running, helps diagnose errors, and is used to enforce rate limits and prevent abuse. We do not use third-party analytics, advertising trackers, or cross-site tracking cookies. The only cookies we set are the ones that keep you signed in.

• To create and maintain your account and sign you in
• To provide the collection, pricing, and trading features of the Service and to save your data between sessions
• To send account email you ask for or need, such as address verification, password resets, and message notifications you have turned on
• To respond to you when you contact us for support
• To monitor for abuse, fraud, and technical problems

We do not use your information for advertising, and we do not build advertising profiles from it.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We share it only in these situations:

• Other users. The parts of your profile, messages, and offers described above, according to the visibility settings you choose.
• Service providers. Companies that host and operate the Service on our behalf: Vercel (application hosting), Supabase (database and file storage), and Resend (transactional email). They may process your information only to provide these services to us.
• Legal requirements. When we are required to by law, or to protect the rights, safety, or property of our users or of Trove Collectibles LLC.
• Business transfer. If the Service is acquired or merged, your information may transfer as part of that transaction. You will be notified before it becomes subject to a different policy.

We look up card prices from public market data sources. Those lookups are made by our servers and identify a card, not you.

We keep your account information for as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where we are required to retain records for legal or accounting purposes. Server logs are retained for no more than 30 days and then discarded.

Deleting your account removes:

• Your account and sign-in credentials
• Your profile, including store name, avatar, bio, specialties, and location
• Your inventory, imported files, purchase prices, and sale and trade records
• Your messages, offers, and event attendance

We are unable to recover any of it afterwards, so export anything you want to keep first.

You can also disconnect CardParser from Facebook at any time: on Facebook, go to Settings › Apps and Websites, select CardParser, and remove it. Removing the app stops any further data from being shared with us, but does not by itself delete data we already hold. Use the email address above for that.

Depending on where you live, you may have the right to request a copy of the personal information we hold about you, to correct it, or to have it deleted. To make any of these requests, email william@trovecollectibles.com. We will not discriminate against you for exercising these rights.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls that keep one user’s data out of another’s account. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Google and Facebook accounts also require users to be at least 13. If you believe a child under 13 has provided us with personal information, email william@trovecollectibles.com and we will delete it.

We may update this policy from time to time. When we do, we will revise the date at the top of this page. If the changes are significant, we will notify account holders by email.

Trove Collectibles LLC 522 W Riverside Ave STE N Spokane, WA 99201

william@trovecollectibles.com