Privacy Policy

Last updated: July 7, 2026

CardForge ("we," "us," or "our") operates the CardForge mobile application and the website at thecardforge.app. This Privacy Policy explains how we collect, use, and protect your personal information when you use our app and services.

By using CardForge, you agree to the collection and use of information as described in this policy.

Information We Collect

1. Account Information

When you create an account, we collect your email address and password (stored securely via Supabase Auth). If you sign in with Google, we receive your Google account name and email address through Google OAuth. We do not receive or store your Google password. To protect your account, we also store an identifier for each device you sign in on, which we use to limit the number of devices active on one account.

2. Bluetooth Device Identifiers

When you pair a label printer, we collect Bluetooth device identifiers (device name and MAC address) to establish and maintain the connection. This data is stored locally on your device only.

3. Imported Spreadsheet Data

When you upload CSV or spreadsheet files for label generation or portfolio import, we process the data you provide (e.g., product names, card numbers, conditions, prices). This data is used solely to generate labels and build your portfolio, and is stored on your device and in your Supabase account.

4. Portfolio and Collection Data

Cards you add to your portfolio (card names, sets, conditions, grades, purchase prices, and quantities) are stored in your Supabase account so your collection syncs across devices.

5. Card Scan Images

When you use the camera to scan a card or graded slab, the photo is transmitted over an encrypted connection to our card-recognition service providers to identify the card. We also retain scan photos, the identification result, and any correction you make to a match, and use them solely to improve CardForge's card-recognition accuracy. Scan images are never used for advertising or profiling and are never sold. You can request deletion of your scan images at any time by contacting us, and they are deleted when you delete your account.

6. Print History and Label Designs

Your print queue, label templates, and pricing rule configurations are stored locally on your device and may be synced to your Supabase account for backup and cross-device access.

7. Subscription Information

If you purchase a CardForge membership, we store your membership status. Payment processing is handled entirely by Apple (App Store), Google (Play Store), or Shopify — we do not collect or store your payment card details.

How We Store Your Data

• On-device storage: Bluetooth device identifiers, print history, label designs, and imported data are stored locally on your device using AsyncStorage.
• Cloud storage: Account information, portfolio data, label templates, pricing profiles, and retained scan images are stored in Supabase, which is hosted on Amazon Web Services (AWS) infrastructure.
• We use industry-standard security measures including encrypted connections (HTTPS/TLS) and secure authentication tokens.

How We Use Your Information

We use your information exclusively to:

• Create, secure, and manage your account
• Enable Bluetooth printer pairing and communication
• Process your imported data to generate labels
• Identify cards you scan and improve scan recognition accuracy
• Show market price information for cards in your portfolio and searches
• Store your portfolio, label templates, and pricing configurations
• Manage your membership status

We do NOT use your information for:

• Advertising or marketing to third parties
• User profiling or behavioral tracking
• Analytics or usage tracking beyond basic app functionality

Third-Party Services

We use the following third-party services:

Service	Purpose	Data Shared
Supabase	Authentication and cloud storage	Email, account data, portfolio, templates, scan images
Google Sign-In	OAuth authentication	Email, account name (via Google)
Apple / Google Play	Subscription management	Subscription status only
Shopify	Website, store, and memberships	Order/membership status, email
Card recognition providers (Ximilar, Card Hedge)	Identifying scanned cards	Scan images (processed to identify the card)
Card pricing providers (PokemonPriceTracker, Card Hedge)	Market price data	Card identifiers only — no personal information

We do not sell, rent, or share your personal information with any other third parties. We do not use any advertising SDKs, analytics trackers, or data brokers.

Data Retention

We retain your data for as long as your account is active. Scan images are retained to improve recognition accuracy as described above. If you delete your account, we will delete your personal data, including retained scan images, from our servers within 30 days. Locally stored data on your device is removed when you uninstall the app.

Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of any future data processing changes

To exercise any of these rights, contact us at the email address below.

Account Deletion

You can delete your account at any time from the Profile screen within the app. This will:

• Remove your authentication credentials from Supabase
• Delete your cloud-stored label templates, pricing profiles, portfolio, scan images, and account data
• Locally stored data will remain on your device until you uninstall the app

Children's Privacy

CardForge is not intended for use by children under 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

International Data Transfers

Your data may be processed and stored in regions outside your country of residence, including the United States (where AWS infrastructure is located). By using CardForge, you consent to the transfer of your data to these regions. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of CardForge after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: contact@thecardforge.app
Website: https://thecardforge.app