GottaDex Privacy Policy

Last updated: July 29, 2026

GottaDex ("we", "us") is a Pokémon TCG collection manager. This policy explains what we collect, why, and your choices. It covers the GottaDex mobile and web apps and this website.

Information we collect

• Account information. When you create an account we collect your email address. If you sign in with Google or Apple, we receive the basic identifiers those providers share (e.g. your email). Authentication is handled by our provider, Supabase.
• Your collection. The cards, inventory, and collections you add are stored locally on your device. If you enable cloud backup (a paid feature), that data is also stored on our backend so you can restore it.
• Scan usage. We keep a count of card scans associated with your account to enforce plan limits (e.g. the free daily allowance).
• Barcode confirmations. When you confirm that a sealed product's barcode maps to a particular product, we save that barcode-to-product mapping (with your account identifier as the confirming user) to build a shared product directory that benefits all users.

We do not use third-party advertising or analytics trackers.

How we use information

• To provide and maintain the app (your collection, sign-in, backups).
• To enforce scan limits and manage your subscription plan.
• To improve the shared sealed-product barcode directory.
• To secure the service and prevent abuse.

Card data, pricing, and barcode lookups

Card and price data come from third-party catalogues (including TCGdex, and TCGplayer / Cardmarket pricing) and are served to your device from our content delivery network. When you scan a sealed-product barcode, the barcode is sent to our server, which may query external product databases (such as eBay's catalogue and UPCitemdb) to identify the product. These lookups send only the barcode — not your personal information.

Service providers we share with

We share limited data with providers who operate the service on our behalf:

• Supabase — authentication and backend storage.
• Cloudflare — website hosting, content delivery, and security.
• Apple App Store / Google Play — process any purchases; we do not receive or store your payment card details.

We do not sell your personal information.

Data retention

We keep account and backup data for as long as your account is active. You can request deletion of your account and associated personal data at any time (see Contact). Aggregate, non-identifying data such as the shared barcode directory may be retained.

Your choices and rights

You may request access to, correction of, or deletion of your personal data by contacting us. Depending on where you live (for example under GDPR or CCPA), you may have additional rights.

Children's privacy

GottaDex is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Security

Data is encrypted in transit using TLS. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions or requests: privacy@gottadex.com