Privacy Policy

This Privacy Policy explains how Toploadr ("Toploadr", "we", "us") handles your information when you use the Toploadr mobile app and this website. We keep it simple: we collect only what the app needs to work, we don't sell your data, and you can delete it.

1. Who we are

Toploadr is operated by Nicky Jansen, an individual based in the Netherlands. For any privacy question, contact us at info@toploadr.app. For users in the EU/EEA, we act as the data controller for the information described below.

2. Information we collect

Account information

When you create an account, we collect your email address and an encrypted password (managed by our authentication provider). This is used to sign you in and sync your collection across devices.

Collection content you create

The data you add to your collection: cards (name, set, number, condition), the prices you paid and sold for, notes, wishlists, trades, and any photos you attach to a card. This belongs to you; we store it so the app can show it back to you.

Camera & photos

When you scan a card, the app uses your camera (or a photo you choose) to capture the card image. You can use the app's other features without granting camera access.

Limited technical data

Basic information needed to operate the service (such as connection logs handled by our hosting provider). We do not use third-party advertising or cross-app tracking.

3. Card scanning & AI processing

To identify a scanned card, the card image is sent to a third-party AI vision service (Anthropic) which returns the card's name, set, and number. Images are processed to perform recognition and are not used by us to build advertising profiles. This processing may occur on servers outside the EU/EEA (see "International transfers").

4. How we use your information

• To identify scanned cards and link you to the correct marketplace listing.
• To store and display your collection, wishlist, sales, and notes.
• To calculate the figures you enter — amount invested and realized profit. (We do not generate speculative "market valuations.")
• To operate, secure, and improve the app, and to respond to support requests.

5. Marketplace links

Toploadr links out to CardMarket so you can view live prices and buy or sell. CardMarket is an independent service with its own privacy policy; once you leave the app, their terms apply. Toploadr is not affiliated with CardMarket, Nintendo, or The Pokémon Company.

6. Who we share it with

We do not sell your personal data. We share it only with service providers that help us run the app, under agreements that limit their use of it:

• Supabase — authentication, database, and file storage (your account and collection data), hosted in the UK (London).
• Anthropic — AI processing of card images for recognition. Anthropic does not use data submitted through its API to train its models.
• Resend — sending account emails (sign-up confirmation and password reset); processes your email address only.
• Vercel — hosting of this website.

We may also disclose information if required by law.

7. Storage, security & international transfers

Your account and collection data is stored on secure cloud infrastructure (Supabase, running on AWS) in the United Kingdom (London). The UK benefits from a European Commission adequacy decision, so transfers from the EU/EEA are permitted. We use reasonable technical and organizational measures to protect it. Some processing (e.g. AI card recognition by Anthropic) may take place in the United States; where that happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

8. How long we keep it

We keep your account and collection data for as long as your account is active. If you delete your account or ask us to erase your data, we remove it from our systems within a reasonable period, except where we must retain limited records to comply with the law.

9. Your rights

If you are in the EU/EEA (or a region with similar laws), you have the right to access, correct, export, or delete your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email info@toploadr.app and we'll help. You may also lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

10. Children

Toploadr is not directed at children under 16, and we do not knowingly collect their data. If you are under 16, please do not use the app or create an account. If you believe a child under 16 has provided us information, contact us and we'll delete it.

11. Changes to this policy

We may update this policy as the app evolves. We'll change the "last updated" date above and, for material changes, notify you in the app.

12. Contact

Questions or requests? Email info@toploadr.app.