Privacy Policy

1. Overview

CardForecast is a market-data and analytics platform for the Pokémon Trading Card Game. Today the Service is largely browseable without an account, and we do not require you to provide personal information to view cards, sets, charts, or tools. As we add optional accounts and paid subscriptions, we will collect the limited additional information described below. We never sell your personal information.

2. Information we collect

Information you provide

If and when account features are available and you choose to register, we collect the information you provide — such as your email address, a username or display name, and an authentication credential (passwords are stored only in hashed form). If you contact us (for example by email), we receive the information in your message.

Payment information

If you purchase a paid Subscription, payment is processed by our third-party payment provider, Stripe. Stripe collects and processes your payment-card or other payment details directly; we do not receive or store your full card number or security code. We may receive limited, non-sensitive billing information from Stripe — such as your subscription status, the last four digits and brand of your card, billing country, and transaction history — to manage your account and comply with our obligations. Stripe’s handling of your data is governed by its own privacy policy.

Information collected automatically

Like most websites, when you use the Service we and our infrastructure providers automatically collect certain technical information, which may include your IP address, browser and device type, pages viewed, referring URLs, timestamps, and similar usage and diagnostic data. We also store a small, non-identifying preference cookie for site settings (for example, your light/dark theme and list-display preferences).

3. How we use information

• to operate, maintain, secure, and improve the Service;
• to remember your preferences and provide a consistent experience;
• to create and manage accounts and authenticate users (when accounts are available);
• to process payments, manage subscriptions, and prevent fraudulent or abusive use (when paid plans are available);
• to respond to your inquiries and provide support;
• to understand usage trends and diagnose technical problems;
• to comply with legal obligations and enforce our Terms of Use.

4. Cookies and similar technologies

We use a minimal set of cookies and local storage to keep the Service working and to remember your preferences. We do not use cookies to build advertising profiles. If we introduce analytics or additional cookies in the future, we will update this policy and, where required, request your consent. You can control cookies through your browser settings, though disabling them may affect some features.

5. How we share information

We share information only as described here:

• Service providers. With vendors who help us run the Service, under agreements that limit their use of the data — for example, our hosting provider (Vercel), our database and backend provider (Supabase), and our payment processor (Stripe).
• Legal and safety. When we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of CardForecast, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction.
• With your direction. When you ask us to share information or otherwise consent.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Data retention

We retain personal information only for as long as needed for the purposes described in this policy — for example, for the life of your account plus a reasonable period afterward — or as required to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Aggregated or de-identified data, which cannot reasonably be used to identify you, may be retained for longer.

7. Data security

We use reasonable technical and organizational measures to protect information, including encryption in transit, access controls, and reliance on reputable providers (such as Stripe for payments). No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, update, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have rights under the GDPR/UK GDPR; residents of California have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any of these rights, contact us at privacy@cardforecast.com. We will respond as required by applicable law and may need to verify your identity first.

9. International data transfers

We and our service providers may process and store information in countries other than the one in which you reside, including the United States. Where required, we rely on appropriate safeguards for such transfers. By using the Service, you understand that your information may be transferred to and processed in these locations.

10. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Paid Subscriptions are intended for adults (18+). If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

11. Third-party links and services

The Service may link to third-party websites (such as marketplaces or data sources). We are not responsible for the privacy practices of those sites, and we encourage you to review their policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

13. Contact us

If you have questions or requests regarding this Privacy Policy or your information, contact us at privacy@cardforecast.com.