Privacy policy
TCG Chase (“we”, “us”) is a website for looking up trading card prices and identifying cards with your phone's camera. It is run by the TCG Chase team, who are the data controller. Contact: contact@tcgchase.app.
You don't need an account to look up prices or scan cards. If you sign in to keep a collection, we ask for your email address and nothing else. We don't use advertising cookies and don't sell personal data.
What we collect
- An anonymous account. When you open the scanner, you get a random account id so your scans can be stored and the service can limit abuse. It is kept in your browser's storage. It isn't linked to your name, email or device unless you sign in.
- Your email and collection, if you sign in. To sign in, you give your email address and we send it a one-time code. We store the address with your account, together with the cards you add to your collection (printing, condition and number of copies). Scans you made in that browser before signing in become part of the same account.
- Your scans. When a scan reaches the result screen, we store a cropped photo of the card, the text our software read from it, the card we matched, and whether you confirmed or rejected the match.
- Your country. Our host, Cloudflare, tells us which country a request comes from. We use it to show prices from the right market. We don't store your IP address.
- Price settings. If you choose a market or currency, the choice is saved in your browser only.
- Usage statistics. We may use Cloudflare Web Analytics, which counts page views without cookies and without tracking you across sites.
Why we use it
- To identify your cards and show their prices. This is the service you asked for.
- To sign you in and keep your collection. We use your email only to send sign-in codes. We don't send marketing email.
- To improve card recognition. Confirmed and rejected scans show us where our recognition gets cards right or wrong. We use stored scans to test and train recognition software and to build datasets of card images. These may be used in our own products, or licensed or sold to others. Scans are meant to show cards only. Please don't photograph people, documents or anything else personal. We remove such images when we find them.
- To keep the service working and safe, for example by limiting how often one account can call our recognition service.
Our legal bases under the GDPR are performance of the service you request (Art. 6(1)(b)) and our legitimate interest in improving and funding it (Art. 6(1)(f)).
Who processes it for us
- Cloudflare: hosting, request handling and optional analytics.
- Supabase: the database, sign-in, and the storage for accounts, collections and scans.
- Resend: sends the sign-in code emails, so it receives your email address and the code.
- Anthropic: when our on-device recognition can't identify a card, the card photo is sent to Anthropic's Claude model to read it. Anthropic processes it to give us the answer.
- TCGdex and jsDelivr: card images and our text-recognition library load from their servers, so they see your IP address like any website you load files from.
Some of these providers process data in the United States, under their standard data protection terms.
Store links
Links to TCGplayer, Cardmarket and eBay may carry an affiliate id, so the store can credit us if you buy something. Once you follow a link, that store's privacy policy applies.
How long we keep it
If you sign in, we keep your email address and collection until you ask us to delete your account. We keep scans for as long as they are useful for improving recognition, or until you ask us to delete them. Clearing your browser's data disconnects you from your anonymous account. The scans already stored remain, but nothing links them to you any more.
Your rights
You can ask to see, correct or delete your data, object to how we use it, or ask for a copy. Email contact@tcgchase.app. If you signed in, email us from that address. Otherwise your account is anonymous, so tell us roughly when you scanned and from which device, so we can find your scans. If you are in the EU or UK, you can also complain to your data protection authority.
Children
Signing in needs an email address. If you are under 16, ask a parent or guardian before using the scanner or signing in.
Changes
We'll update this page when what we collect changes, and change the date at the top.