Privacy Policy

Charpulls TCG is a Pokémon TCG collection tracker and community hub. This page explains what we collect, why, and the controls you have over it. We try to collect as little as we can to run the service, and our defaults lean private — you opt into visibility, not out of it.

What we collect

• Account basics. When you sign in with Google we receive your name, email address, and profile picture. We use Google solely to verify it’s you — we never see your Google password.
• Profile details you add. Things like your handle, display name, bio, social links, and favorite card type. All optional, all editable in Settings.
• Date of birth. Collected at sign-up only to confirm you’re old enough to use the app and, later, to gate age-restricted features like trading. We store your birthdate, not a public age.
• Your collection. The cards you mark as owned, your wishlist, your binders, and how you’ve arranged them.
• Technical data. Standard server logs and error reports (e.g. IP address, browser, and what failed) that help us keep the site up and fix bugs.

How we use it

• To run your account and save your collection.
• To show your profile and binders to others — but only to the extent your privacy settings allow.
• To send the emails you’ve opted into (you can turn these off).
• To keep the service secure and to diagnose problems.

We do not sell your personal information, and we don’t show third-party advertising.

Your privacy controls

Privacy defaults are conservative. Your collection, location, and search-engine visibility are off until you choose to turn them on. You can review and change every one of these in Settings at any time.

Service providers

We rely on a small set of trusted vendors to operate the app. They process data on our behalf and only as needed to provide their service:

• Google — sign-in / authentication.
• Vercel — application hosting.
• Neon— database (your account & collection).
• Cloudflare R2 — card image storage.
• Resend— transactional & notification email.
• Sentry — error monitoring.
• Pusher — real-time updates.

Cookies

We use a session cookie to keep you signed in. We don’t use advertising or cross-site tracking cookies.

Children

Charpulls TCG isn’t intended for children under 13. Our sign-up flow blocks accounts for anyone under that age. If you believe a child has created an account, please contact us and we’ll remove it.

Keeping and deleting your data

We keep your data for as long as your account is active. You can edit most of it directly in Settings, and you can ask us to export or delete your account data by getting in touch.

Changes to this policy

This is an early-stage product and this policy will evolve as the app grows. When it changes in a meaningful way, we’ll update the date at the top of this page.

Contact

Questions about privacy or your data? Reach us through the contact page.