Privacy Policy

1. Data we collect

We only collect what the service requires:

• Your email address, to create your account and sign you in.
• Your name and profile picture, only if you sign in with Google, which passes them to us.
• The content you enter: your collections, items, their condition, their value, your personal notes.
• The photos you attach to your items.
• Anonymous usage statistics, measured by our host and by Google Analytics.

2. What we do not collect

• No payment data: the app is free and has no purchases.
• No location data.
• No access to your contacts, calendar, messages or files.
• No advertising identifier: the app shows no ads.

3. Purpose and legal basis

Your data is used to provide the service: storing and displaying your collection, estimating its value and securing your access.

The legal basis is performance of the service contract for account and collection data, and your consent for audience measurement.

4. Hosting and processors

We rely on providers that process this data on our behalf, and never for advertising:

• Vercel: application hosting.
• Cloudflare: storage of the photos you add, in a private bucket.
• Neon: database, where your account and collections are stored.
• Resend: sending sign-in codes by email.
• Google: sign-in with a Google account, and audience measurement.
• Zenhook: service that notifies us of new sign-ups. Your name and email address pass through it, solely to produce that alert.

5. Item search

When you search for a card or an item, the term you type is sent to specialised databases (TCGdex, Scryfall, YGOPRODeck, API TCG, IGDB, Comic Vine, Discogs, Rebrickable, Open Library, UPCitemdb) to find the matching entry.

These requests come from our servers and carry neither your identity, nor your IP address, nor the contents of your collection.

6. Sharing a collection

Your collections are private by default. If you turn on a collection's public link, anyone who has the link can view, without an account, its name, description and items (name, photo, condition, quantity, set), plus their estimated values if you choose to show them.

Your notes, purchase prices, acquisition dates and identity are never published, and the page is not indexed by search engines. You can turn the link off at any time: the old address stops working immediately.

7. Retention

Your data is kept for as long as your account exists. It is erased as soon as you delete it.

Sign-in sessions expire automatically after a period of inactivity.

Demo accounts, opened from the website without signing up, are erased with all their content when their session expires, after 7 days.

8. Deleting your account

You can delete your account at any time from the Account tab in the app. Deletion is immediate and permanent: account, collections, items, photos, value history and sessions are all erased, with nothing retained and no grace period.

If you can no longer sign in, email us from the address linked to the account and the deletion will be carried out within 30 days.

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data.

The CSV export available in the app lets you retrieve your collections at any time.

To exercise these rights, write to contact@kapinfo.fr. You may also lodge a complaint with your national data protection authority.

10. Security

Traffic to and from the app is encrypted in transit (HTTPS). Access to your collections is restricted to your account, and your photos are only reachable through your session, or through the public link of a collection you chose to share.

Sign-in works without a password, either with a Google account or with a six digit code sent by email.

11. Children

The app is not directed at children under 13 and we do not knowingly collect their data.

12. Changes

This policy may change. The last update date appears at the top of the page.

13. Contact

For any question about this data: contact@kapinfo.fr.