Privacy Policy

1. Information we collect

• Account information such as email, username, display name, profile photo, hashed password (handled by our auth provider), and sign-in through Google or Apple if you choose those options.
• Collection data you store: card records, grades, cert numbers, locations, tags, collections, notes, purchase and sale details (including prices and dates), ask prices, and photos you upload.
• Camera and recognition images. When you scan or photograph a card for identification, OCR, or crop, we may store that image and related metadata (for example grader, cert, match result) in our recognition-searches storage so the feature can work and we can debug it.
• Public profile data you choose to make public (display name, avatar, username, public collections). That content can be shared and is treated as potentially public. It must follow the Terms of Use, including the rules on adult and hateful content.
• Peer offers. If you send or accept an offer, we store the offer amount, status, logistics notes, and — when you share them — a shipping address and payment handles (such as Cash App, Venmo, or PayPal). The other party in that offer can see what you share.
• Contact and reports. Messages you send on the Support page (category, Comment - Request - Issue, and optional screenshots), by email, or through support tickets, plus in-app profile reports. That content goes to TechDoba and may include your user id when you are signed in.
• Technical data such as IP address, device/browser type, and usage logs needed to operate and secure the Application.
• Connected services when you link a third-party account (for example eBay), including tokens and account identifiers those services return, plus listing content you publish through Hobby Pulse.

2. How we use information

We use information to provide Hobby Pulse: authenticate you, store your collection, identify cards from photos, show catalog and market data, process subscriptions, send support email, run marketplace features you turn on, keep the product secure, and communicate about the Application. TechDoba support staff and developers may access account and collection data to operate, debug, and support the product.

3. We do not sell your data

We do not sell your personal information. We do not share, rent, or dump user databases, mailing lists, collection contents, photos, or similar files to third parties for their marketing or other independent use without your affirmative consent.

Other collectors only see what you choose to make public, or what you share in an offer or message with that person. We may disclose information if required by law or to protect rights, safety, and security.

4. Processors we use to run Hobby Pulse

These companies process data only as needed to operate the Application. They are not a sale of your data. We do not invent extra processors here — this list matches what the product actually uses today.

• Supabase — authentication, database, and file storage (accounts, collection records, photos, sessions).
• Microsoft Azure — hosts the web Application (Azure App Service). Azure AI Vision receives photo bytes (or a reachable image URL) when we crop or analyze a card image.
• CardHedger — catalog search, market data, cert lookup, OCR, and visual match. When you search or scan, we send the query and/or photo CardHedger needs to return results.
• Stripe — web billing. We send your email and create a Stripe customer and subscription. Card numbers stay at Stripe; Hobby Pulse stores customer and subscription IDs, plan, and status. Stripe’s own policy covers payment details.
• SendGrid — delivers contact-form and support email (including profile reports).
• Aidbase — customer support. When you submit a Support page ticket, Aidbase may process the ticket content so we can reply: user id, username, email, category, comment / request / issue, and optional screenshots.
• Google — if you sign in with Google, Google provides the account identifiers and email needed for that sign-in.
• Apple — if you sign in with Apple, Apple provides the account identifiers and (when you share it) email needed for that sign-in.
• eBay — when you connect eBay, we store OAuth tokens and send listing content you choose to draft or publish. Listings you publish remain on eBay under eBay’s terms.
• Shopify — if and when you connect Shopify, we will store connection tokens and send store or listing content needed for that feature, similar to eBay. Shopify is not connected unless you turn it on.
• Apple and Google Play — if you subscribe in a mobile app, those stores process the payment. Hobby Pulse may store an entitlement (plan and status) so the app knows what you paid for.

5. Cookies, sessions, and device storage

On the web we use cookies for your signed-in session (via Supabase) and a theme preference cookie (hp-theme). The browser may also keep theme and last-search data in localStorage. On mobile, session tokens are stored in the platform secure store (SecureStore), not in a web cookie.

These are needed to keep you signed in and remember simple preferences. We do not use advertising cookies today.

6. Analytics and tracking

We do not currently use a third-party analytics SDK, advertising pixel, or similar tracking tool. We may later collect first-party product analytics (for example, which screens are used) to operate and improve Hobby Pulse. We will not turn on non-essential third-party analytics, advertising, or similar tracking without your consent.

7. Retention

We keep information while your account is active and as needed to run the Application or comply with law. After you delete your account we remove collection data, photos, scans, and profile records from the live Application. Copies may remain in backups or logs for a limited time.

Billing processors (Stripe, and Apple or Google if you paid there) may keep invoices and payment records for tax, fraud prevention, or their own legal duties. Listings you already published on eBay or another connected marketplace stay on that marketplace until you remove them there. Shared catalog and market data that is not your personal collection stays in Hobby Pulse.

8. Your choices

You can update profile and collection data in the Application, keep your profile private, export a copy of your collection as CSV, and disconnect linked services such as eBay.

You can delete your account in the Application (Profile → Account on the web, or the matching settings screen on mobile). Mobile clients may also call DELETE /api/account with a signed-in token and confirmation. If you cannot use in-app deletion, contact us through Support. Store subscriptions billed by Apple or Google Play must be canceled in that store.

9. Children’s privacy

Hobby Pulse is intended only for adults 18 and older, as required by our Terms of Use. It is not directed to children, and we do not knowingly collect personal information from anyone under 18, including children under 13.

If we learn that we have collected personal information from someone under 18, we will delete that account and its data. If you are a parent or guardian and believe your child has created an account or given us personal information, contact us through Support and we will delete it.

Adults may record cards owned by family members in their own collections. Please do not include a child’s personal information, such as a name or photo, in public profiles, public collections, offers, or messages.

10. Changes

We may update this Privacy Policy from time to time. Continued use after changes become effective constitutes acceptance. The effective date and version above will be updated when the Policy changes.

11. Contact

Privacy questions: contact us through Support.