Privacy Policy

1. Who We Are

PokeMiner ("we", "us") provides Pokémon TCG market data, price tracking, card scanning, and collection management through pokeminer.com and the PokeMiner mobile app (together, "the Service"). This policy explains what we collect, why, and the choices you have. For questions, contact [email protected].

2. Information We Collect

• Account information. Your email address, username, and a securely hashed password. If you sign in with Google, we receive your email address and Google account identifier instead of a password.
• Content you create. Your collections, wishlists, price alerts, and alert delivery settings.
• Card scan photos. When you use the card scanner, the photo you capture is uploaded to our servers and processed to identify the card. Scan photos are used solely for card identification — never for advertising, profiling, or training unrelated systems. We log that a scan occurred (account, timestamp, subscription tier) to enforce daily scan limits.
• Payment information. Paid subscriptions are processed by Stripe. Your card number never touches our servers; we store only your subscription status, plan, and Stripe customer reference.
• Usage data. On the website we use PostHog analytics to understand which features are used (pages viewed, actions taken, approximate location from IP, device/browser type). The mobile app does not include third-party analytics or advertising SDKs.
• Logs. Like nearly all web services, our servers keep short-lived request logs (IP address, user agent, timestamps) for security, debugging, and abuse prevention.

3. Device Permissions (Mobile App)

The mobile app requests camera access only when you open the card scanner, and uses it only to capture the card photo you choose to scan. The app does not access your photo library, contacts, microphone, or precise location.

4. How We Use Information

• Provide, maintain, and secure the Service
• Identify cards you scan and maintain your collections
• Process subscriptions and enforce plan limits
• Send transactional emails (price alerts you configured, account notices)
• Understand aggregate usage to improve features
• Detect and prevent fraud, scraping, and abuse

We do not sell your personal data, and we do not use it for third-party advertising.

5. Sharing

We share data only with service providers that operate the platform on our behalf: Stripe (payments), our cloud hosting providers (servers and database), PostHog (web analytics), and our email delivery provider (alerts and account email). Each receives only what it needs to perform its function. We may also disclose information if required by law or to protect the Service and its users.

6. Data Retention & Deletion

Account data is retained while your account is active. You can delete your account — and the personal data associated with it — by emailing [email protected] from your account email. We respond within 30 days. Aggregate market data that contains no personal information is retained indefinitely.

7. Security

All traffic is encrypted in transit (TLS). Passwords are stored using a one-way hash. Mobile sessions are stored in the operating system's secure storage (iOS Keychain). No method of storage is 100% secure, but we work to protect your data with industry-standard practices.

8. Your Rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we'll honor these requests for all users, regardless of location.

9. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

10. Changes

We may update this policy as the Service evolves. Material changes will be announced on the website or by email. Continued use after changes take effect constitutes acceptance. The effective date above always reflects the current version.

11. Contact

Questions or requests: [email protected]