Privacy Policy

1. Who we are

Collectly is a UK-operated card collection service. This policy explains what personal data we hold and why, in line with UK GDPR.

2. What we collect

• Account data: your email address and password (stored hashed).
• Collection data: the cards, prices, costs, sales and wishlist entries you add.
• Scan photos: images you submit for identification are processed to identify the card and are not used to build advertising profiles.
• Billing status: your plan and subscription state. Card details go directly to Stripe; we never see them.
• Usage analytics: privacy-friendly, cookie-less page analytics (Vercel Analytics). No cross-site tracking, no advertising cookies. The only cookies we set are the ones that keep you signed in.

3. Where it lives and who processes it

• Supabase (database and authentication), hosted in London (eu-west-2).
• Vercel (application hosting and analytics).
• Stripe (payments and subscription management).
• AI providers, including Anthropic: scan photos and card text are sent for automated identification. They are used to answer your scan, not for training on your behalf.

4. Public profiles

Every account has a public collector profile on this site, at /u/yourusername, showing your username, display name, bio, join month, collection counts and your highest-value cards. Your collection’s monetary value and individual card prices are private by default and appear only if you switch on “Show collection value” in Settings. You can also exclude your page from search engines in Settings. Anything you choose to publish there is visible to anyone with the link.

5. Sale prices and how our pricing improves

When you record a sale in Collectly — by hand, or automatically from a connected eBay or Shopify account — we add the price that card sold for to the pool of real sale prices behind our price estimates. Actual sale prices are far better evidence than what cards are listed at, so this is what makes the estimates you and every other member see more accurate over time.

What goes into that pool is only: which catalogue card it was, its condition or grade, the price in pounds, the date, and which channel it sold on. It does not include your name, username, account, workspace, listing, or anything about the buyer, and there is no link back to you. Nobody looking at a price can tell whose sale it came from, and we cannot tell either.

The legal basis is legitimate interest — running an accurate pricing service. You can object at any time using the contact details below, and we will exclude your sales from the pool. Disconnecting a marketplace stops any further sales being added.

6. Why we process it

To run your account and vault (contract), to meter and bill plans (contract), to keep the service secure and improve it (legitimate interest), and to meet legal obligations such as tax records on payments.

7. Retention and deletion

Your data is kept while your account is open. Close your account and your collection data is deleted from the live database; short-lived backups roll off automatically. Payment records are retained as required by UK tax law.

8. Your rights

You can request access to, correction of, export of, or deletion of your personal data at any time, and you can complain to the ICO (ico.org.uk) if you think we’ve handled your data badly. Contact us first and we’ll usually fix it faster.

9. Contact

support@collectly.uk