Toploadr
Get the app

Legal

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Toploadr ("Toploadr", "we", "us") handles your information when you use the Toploadr mobile app and this website. We keep it simple: we collect only what the app needs to work, we don't sell your data, and you can delete it.

01Who we are

Toploadr is operated by Nicky Jansen, an individual based in the Netherlands. For any privacy question, contact us at info@toploadr.app. For users in the EU/EEA, we act as the data controller for the information described below.

02Information we collect

Account information

When you create an account, we collect your email address and an encrypted password (managed by our authentication provider, Supabase). Your account also gets an internal user ID. This is used to sign you in and sync your collection across devices.

Collection content you create

The data you add to your collection: cards (name, set, number, condition, grade), the prices you paid and sold for, notes, wishlists, sales, trades, and photos. When you add a scanned card to your collection, the photo the app took of it is uploaded and stored with that card; you can also attach a photo yourself. This belongs to you; we store it so the app can show it back to you.

Camera & photos

The live scanner uses your camera to recognise cards on your phone. Camera frames are not uploaded while you scan. A photo only leaves your phone when you add the card to your collection (see above), when you report a problem with a scan (see "Scan records" below), or in the one case described in section 03. You can use the app's other features without granting camera access.

Scan records and scan history

Each scan writes a small record to your account: what was read, which card it resolved to, whether it worked, and your platform (Android or iOS). These records make up your Scan history in the app and help us measure and improve recognition. Clearing the "Scanned this session" list in the app does not remove them; they are deleted with your account. If you correct a scan or pick the right card from a list, that correction is stored with your account and used to improve recognition for everyone. If you report a problem with a scan, the photo of that scan is stored with the report so we can see what the app saw. Photos are stored in your own private folder and are not public.

Price-link records

When you open a Cardmarket or eBay price link from the app, we record which card it was, which screen you opened it from, the link that opened (including the country and condition filters) and the marketplace, together with your user ID. We use these records to count the price lookups in the free plan's monthly allowance, and to find links that need fixing. They are deleted with your account.

Crash and error reports

When the app crashes or hits an unexpected error, a report is sent to Sentry so we can fix it. A report contains the error, where in the code it happened, and technical details about the device (model, operating system, app version). Sentry also records when the app was started and whether that session ended in a crash. Reports and sessions carry a random installation identifier that the Sentry software creates when the app is installed; it is not your user ID, it is not linked to your account or email address, and it is reset when you reinstall the app. We have disabled Sentry's collection of other personally identifying information, and we do not attach your email address or your collection data to these reports.

Subscription status

If you subscribe to Toploadr Pro, we store whether your subscription is active, which plan and store it is, and when it renews. We never see or store your payment details: the payment is handled entirely by Google Play or Apple, and we only receive the status of the purchase, through RevenueCat.

Limited technical data

Basic information needed to operate the service, such as connection logs kept by our hosting providers. We do not use third-party advertising, advertising identifiers, or cross-app tracking.

Visits to this website

We count visits to toploadr.app with Vercel Web Analytics, to see which pages and links bring people to the app. It sets no cookies and stores no IP address. It records the page, the referring site, the country, and the browser and device type, in aggregate. A visit is recognised for at most a day by a one-way hash, which is then discarded. The app itself does not use it.

03Card recognition & AI processing

Card recognition runs on your phone: the live scanner and the recognition model do not send your camera images anywhere. There is one exception. When you add a card from a photo (Add a card → camera or photo library) and the phone cannot read that photo itself, the photo is sent through our server to a third-party AI vision service (Anthropic), which returns the card's name, set, and number. Anthropic does not use images submitted through its API to train its models, and processes them in the United States (see section 07). We do not use these images to build advertising profiles.

Two other lookups send card details, never anything about you: when you scan a graded slab, the certification number on its label is checked with PSA; and when the app shows recent sold prices for a graded card, the card's name, number, set and grade are looked up with our sold-price data provider.

04How we use your information, and why we may

For users in the EU/EEA: we process your account, collection, scan, price-link and subscription data because it is necessary to provide the service you signed up for (the contract), and crash reports and recognition improvements on the basis of our legitimate interest in a working, secure app. Where the law requires us to keep records, we do so to meet that legal obligation.

05Marketplace links

Toploadr links out to Cardmarket and eBay so you can view live prices and buy or sell. Both are independent services with their own privacy policies; once you open their page, their terms apply. We do not send them your email address or user ID. What we record on our side when you open a link is described under "Price-link records" above. Toploadr is not affiliated with Cardmarket, eBay, Nintendo, The Pokémon Company, or Bandai Namco.

06Who we share it with

We do not sell your personal data. We share it only with service providers that help us run the app, under agreements that limit their use of it:

We may also disclose information if required by law.

07Storage, security & international transfers

Your account and collection data is stored on secure cloud infrastructure (Supabase, running on AWS) in the United Kingdom (London). The UK benefits from a European Commission adequacy decision, so transfers from the EU/EEA are permitted. Crash reports are stored by Sentry in the EU. We use reasonable technical and organizational measures to protect your data. Some processing takes place in the United States: subscription management by RevenueCat, and AI recognition of a card photo by Anthropic in the case described in section 03. Where that happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

08How long we keep it

We keep your account, collection, scan history and price-link records for as long as your account is active. When you delete your account, we remove them from our systems as described below, except where we must retain limited records to comply with the law. Crash reports contain no account data and are deleted automatically by Sentry after at most 90 days. Your subscription's purchase records stay with Google Play or Apple, and with RevenueCat, under their own retention rules, because they are the store's records of a payment.

09Deleting your account

You can delete your account and all associated data at any time in the app: Dashboard → Settings → Delete account. This permanently removes your account, collection, photos, wishlist, sales, trades, scan history, scan corrections and price-link records. It cannot be undone.

Can't reach the app? Email info@toploadr.app from the address you signed up with, with the subject "Delete my Toploadr account". We delete everything within 30 days and confirm by email. See also the account deletion page.

Deleting your account does not cancel a Toploadr Pro subscription. Cancel that in Google Play or in your Apple ID settings, as described in the Terms of Service.

10Your rights

If you are in the EU/EEA (or a region with similar laws), you have the right to access, correct, export, or delete your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email info@toploadr.app and we'll help. You may also lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

11Children

Toploadr is not directed at children under 16, and we do not knowingly collect their data. If you are under 16, please do not use the app or create an account. If you believe a child under 16 has provided us information, contact us and we'll delete it.

12Changes to this policy

We may update this policy as the app evolves. We'll change the "last updated" date above and, for material changes, notify you in the app.

13Contact

Questions or requests? Email info@toploadr.app.