Privacy

You sign in with Google. This site receives and stores your name, email address, whether Google says that address is verified, and the link to your Google profile picture. It never sees your Google password, and it asks Google for nothing else — no contacts, no calendar, no Drive.

Staying signed in uses one cookie holding a session token (better-auth.session_token). It is required for the site to work and there is no way to be signed in without it.

Everything you record about a card — the back, the grade, the certificate, what you paid, where you keep it, who you bought it from, and any notes — is stored against your account and visible only to you. Cost, location, notes and the seller are treated as private throughout: they are never published, never included in anything shared, and never written to a log.

Photographs you upload are private unless you publish one, individually. They are served by this application rather than from a public bucket address, so unpublishing takes effect on the next request — there is no public link left alive afterwards. Uploaded images have their embedded metadata removed, including any GPS position a phone recorded.

Three things can leave your account, and each is off until you turn it on:

• A public profile. Private by default, and making it public shares nothing by itself — it shows your name, and then only what you switch on. Each is its own switch and each starts off: the cards you hold, your want list, and any set you are chasing, one set at a time. A card shown this way carries its subject, its back, its grade and grading service, and only the photographs you have published of it. It never carries what you paid, where you keep it, who you bought it from, your notes, your certificate numbers, or when you acquired it — a public page is not sent those fields at all, rather than being sent them and hiding them.
• Contributing your costs to the price guide. Off by default. When on, what a card sold for and when becomes a sighting in the public price record. The price record has no column for who supplied a figure — the link between you and a sighting is a separate row, kept so you can withdraw it, and never served with the price.
• Recording a fact about a card — a background colour, a print flaw. The fact is published without your name; the catalog knows what was observed and not by whom.

This site can use Google Analytics to count how it is used. It sets cookies in your browser, and Google receives your IP address in truncated form — so it asks first, and nothing is loaded until you say yes. Say no and no request is made to Google at all: the refusal is the absence of the script rather than a setting passed to it.

What is measured is constrained deliberately: an event says what happened — a card was added, a search was run — and never which card. No subject number, no certificate, no price, no image, no identifier of any kind travels with an event. Addresses of your own pages are reported as the section (/collection/*) rather than the row, because the address of a page about one of your cards is itself an identifier.

Your answer is remembered in your browser, never sent anywhere, and you can change it at any time:

Any browser setting or extension that blocks Google Analytics stops it as well, and nothing on this site behaves differently as a result of any of this.

The site, its database and its image storage all run on DigitalOcean in their New York region. Nothing is copied elsewhere.

Two outbound requests exist. Looking up a certificate asks PSA’s public certificate API about that certificate number; it is told the number and nothing about you. Fonts are served from this site rather than from Google, so loading a page makes no request to them.

There is no advertising network on this site, no tracking pixel, and nothing is sold or given to a data broker.

You can export everything at any time, as CSV or JSON, from your collection settings. The export includes the private fields — cost, notes, location — for the obvious reason that a record with your cost basis stripped out is not a record you can leave with.

You can delete your account from the same page. It removes your rows and takes your photographs out of storage rather than merely hiding them, and there is no undo. Two things deliberately survive: any price sighting you contributed stays in the public record with its link to you deleted, and any fact you recorded about a card is kept anonymously — those are knowledge about the hobby rather than about you, and neither can be traced back once the link is gone.

Four addresses, each read by the same person:

[email protected]

For anything on this page, including a copy of your data or its deletion — though both are buttons on your own settings page and will be faster that way.

[email protected]

For a security problem. Please report it here rather than publicly, and please do not run automated scanning against the live site — it shares a small database with the people using it.

[email protected]

For a correction to the catalog, or anything else. Corrections are genuinely wanted: this site is compiled from sources that disagree, and it says so rather than pretending otherwise.

[email protected]

For a takedown request, for a photograph or for research of yours that appears here.

This is a one-person project rather than a company. If that changes, this page changes with it and the date at the top will say so.