Privacy

Data controller: POKEMAEL, SAS with share capital of €200, RCS Paris 938 862 919, TVA FR60 938 862 919, registered office 25 rue de Ponthieu, 75008 Paris. Contact: contact@gradescan.fr.

Without an account, your collection and photos stay on your device (browser storage). Only the following leave it: card searches sent to public databases, and, when the app isn't sure about a scanned card, the card's photo, sent to our server to read its name and number.

With an account, we keep: your username, your email, your password in encrypted form (never in plain text), the public keys of your passkeys, your Google identifier if you log in with Google, your Apple identifier (anonymous) if you log in with Apple, your collection (cards, sealed, wishlist, sales, settings) and the photos you add, to sync them between your devices. If you turn on price alerts: your browser's notification subscription address, or your iPhone's notification token. If you share your collection: a public snapshot (names, images, values, without purchase price or investment), deleted when you turn sharing off.

Scan photos. To improve recognition, the photo sent to the server and what the app made of it may be kept for 3 days, then automatically erased.

Purposes and legal bases: providing the service and your account (performance of the contract); sending you the login codes and alerts you request (performance of the contract); securing the service and limiting abuse (legitimate interest); invoicing the subscription (legal obligation).

Retention: as long as the account exists; everything is deleted when the account is deleted, except invoices, kept for 10 years. Codes sent by email: 15 minutes at most.

Providers: Cloudflare (hosting, storage, reading of card photos), Brevo (sending emails), Google (Google login, if you choose it), Apple (Apple login and notifications in the iPhone app), and subscription payment: Stripe on the website, Google Play in the Android app, Apple in the iPhone app (they process your payment details, which we never see). Cloudflare and Google may process data in the United States, under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. No data is sold or used for advertising.

Other data: if you write to us from the app ("Write to us"), your message, your email and your browser type are kept for 1 year. Your IP address is used at the time of the request to limit abuse (request rate), without being stored with your account. If you share your collection or wishlist, your username is visible on the link. Nightly technical backups are kept for 7 days, so deleted data disappears from them within 7 days at most.

Cookies: a single technical session cookie, needed for login, and the browser's local storage for your settings. No advertising or audience-measurement cookies, hence no consent banner.

Delete your GradeScan & Collect account: in the app (website, Android or iPhone), Settings, Account, "Delete my account". Without access to the app, email contact@gradescan.fr from the account's address: deletion is done within 30 days. Deleted: account, collection, photos, shares, alerts and messages. Kept: invoices (10 years, legal obligation). An active subscription through Google Play or Apple must also be cancelled in the store.

Your rights: access, rectification, erasure, portability (export from the settings, or on request by email, including for a free account), objection and restriction, by writing to contact@gradescan.fr. We reply within one month. You may also lodge a complaint with the CNIL (cnil.fr).

Age: the service is intended for people aged 15 and over; below that, a parent's consent is required to create an account.

GradeScan & Collect browser extension: it has no account and collects nothing about you. On the Vinted and Leboncoin listings you view, it reads the title, price and photo in your browser to recognize the card; prices and images come from TCGdex. A card's eBay sold listings are read from your browser when you click "eBay sales" or open the card's page in the app; they are used to refine its value. The copy of your collection made by the app stays on your computer, in the extension.