Privacy Policy

CardMagnate ("we", "us") is a UK-based Pokémon Trading Card Game collector community site at cardmagnate.co.uk. This policy explains what personal data we collect, why, and what rights you have over it.

What we collect

• Account data: your email address and password, handled entirely by our authentication provider, Supabase (EU region). We never see or store your raw password ourselves.
• Profile data (optional): display name, public handle, bio, and avatar URL, if you choose to add them.
• Collection data: the cards, quantities, versions, and conditions you record in your vault. This is private by default; you control whether your collection is visible to others.
• Community posts: anything you choose to post to the community feed is visible to other users by design.
• Technical data: a session cookie and a CSRF-protection cookie, needed to keep you signed in securely. We don't use tracking or advertising cookies.

Why we collect it

To provide the service you're signing up for: authenticating you, storing your collection, showing card pricing research, and running the community feed. We don't use your data for advertising, and we don't sell it.

Who else sees it

• Supabase — hosts our database and handles authentication (EU region).
• Cloudflare — hosts the website and backend, and provides email forwarding.
• Zoho Mail — hosts our support inboxes (info@ and support@cardmagnate.co.uk).
• PokeWallet — a third-party pricing data provider we query server-side for market price research. We do not send your personal data to PokeWallet; only card identifiers are looked up.

We don't share your personal data with anyone else, and we never sell it.

How long we keep it

For as long as your account exists. If you delete your account, your profile and collection data are removed. Some records may be retained briefly where required for security or legal reasons.

Your rights

You can view and edit your profile data at any time from your account settings, and delete your account entirely (which removes your profile and collection data) from the same page. You can also request access to, correction of, or deletion of your data by emailing support@cardmagnate.co.uk.

Children

CardMagnate is not directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page. Continued use of the site after a change means you accept the update.

Contact

Questions about this policy or your data: support@cardmagnate.co.uk.