Privacy Policy

1. Who we are

Pokémon TCG Tracker is an independently designed product and service operated by Legna Labs. For privacy questions or requests, email support@legnalabs.com.

2. Information we collect

Account and sign-in information

When you create or access an account, we process your email address, account identifier and, when provided, your name. We also create authentication records needed to keep you signed in and protect your account.

Google sign-in information

If you choose “Sign in with Google”, we receive the Google account identifier, name, email address and profile image made available through the basic Google sign-in profile. We use this information only to authenticate you, create or find your Pokémon TCG Tracker account, display account information and help secure access.

Device and collection information

We process the Pokémon TCG Tracker device code and identifiers, device name, ownership link, activation and last-seen information, firmware information and operational status. We also store the cards you save or choose to display, their order and enabled status, selected finish, language and condition, price-source preference, display currency and related market-price history.

Communications and marketing choices

If you contact support, we process the information in your message and any order or device details you provide. If you separately choose to receive product and marketing emails, we store your email address, consent status, consent version and subscription history. Marketing consent is optional and is not required to use the portal.

Technical and usage information

Our systems may process IP address, browser and device information, request timing, security and rate-limit signals, error information and operational events. We use essential cookies for sessions, language and theme preferences, and to remember a marketing subscription choice. Cloudflare Turnstile may process technical information to distinguish people from automated abuse.

4. How and why we use information

We use information to:

• provide account access and the customer portal;
• claim, configure, manage and support Pokémon TCG Tracker devices;
• save card selections and display preferences;
• retrieve, maintain and display card-market estimates;
• send sign-in links, service messages and support replies;
• send product or marketing emails only when you have opted in;
• protect accounts, prevent abuse, diagnose errors and maintain the service;
• comply with legal obligations and establish or defend legal claims.

Where applicable under data-protection law, these uses rely on performing our service agreement with you, our legitimate interests in operating and securing the service, your consent for optional marketing, and compliance with legal obligations.

5. How information is shared

We disclose information only as needed to operate Pokémon TCG Tracker, including to:

• Google, when you choose Google sign-in;
• hosting, infrastructure and security providers, including Cloudflare services used to deliver and protect the portal;
• email-delivery providers, including Resend, for sign-in links, service messages and emails you request;
• card catalogue and pricing services, which receive card or market queries needed to provide results; we do not intentionally include your account identity in those queries;
• professional advisers, authorities or other parties when required by law or reasonably necessary to protect rights, safety and the service.

We do not sell personal information. If a provider processes data outside the European Economic Area, we use the safeguards required by applicable law where available.

Purchases made through Etsy are governed by Etsy’s own privacy practices. The Pokémon TCG Tracker product page links to Etsy but does not operate an internal checkout.

6. Retention and security

We keep account, device and saved-card information while your account is active and for as long as needed to provide the service. One-time sign-in tokens expire and are removed after use. Detailed price snapshots are generally retained for 30 days, with daily snapshots retained for up to 365 days. Operational records are generally retained for between 90 days and 12 months depending on severity. Marketing subscription and consent records are kept while needed to honour your choice and demonstrate compliance.

When information is no longer needed, we delete or anonymise it unless a longer period is required for security, dispute resolution, accounting or legal obligations. We use administrative and technical safeguards, including signed sessions, restricted access and encrypted network connections. No internet service can guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, receive a portable copy, and withdraw consent. Withdrawing consent does not affect processing already carried out lawfully.

You can change product-email preferences in the portal or contact us to unsubscribe. You can also ask us to delete your Pokémon TCG Tracker account and associated personal information. We may need to verify your identity before completing a request.

Send requests to support@legnalabs.com. You may also complain to your local data-protection authority.

8. Children

Pokémon TCG Tracker is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can review and remove it where required.

9. Changes to this policy

We may update this policy as Pokémon TCG Tracker or applicable requirements change. We will publish the revised version here and update the date above. Material changes may also be communicated through the portal or by email where appropriate.

10. Contact

Questions and privacy requests can be sent to support@legnalabs.com.