Privacy Policy
Full transparency on what we store, how we protect it, and the controls you have.
Effective · June 2026
Email address, authentication identifiers (including Google OAuth), the catalog entries and images you contribute, your private inventory rows (quantities, condition, notes, purchase prices and market prices), and standard service logs.
Your private inventory is stored in a separate table protected by Row Level Security (RLS) scoped to auth.uid(). No other user — collector or administrator — can read your rows. Financial metrics (total value, money invested, ROI) are computed only from your own data and never appear on public share links.
Only the shared catalog data (player names, teams, years, brands and images you uploaded) and the public view of your collection that you explicitly share via the /share/ link. The public view never exposes prices, purchase costs, ROI or private notes.
You can view, edit or delete all your data at any time. Deleting your account removes your private inventory. For privacy requests, contact us through the report feature or the email associated with the Hub.