Privacy Policy

PokePrices.io is operated by Luke Pierce, an independent UK-based developer. Contact: [email protected].

Browsing PokePrices anonymously — looking at card pages, sets, insights, the AI assistant — does not require an account and does not require you to give us any personal information.

We use Google Analytics to count visits and understand which pages people use. This drops standard analytics cookies and records your approximate location (country level), device type, browser and the pages you view. We do not use the analytics data to identify you personally. You can opt out at the browser level using any standard ad/analytics blocker.

Our hosting providers (Vercel for the website, Supabase for the database) keep short-lived request logs that include IP addresses for security and abuse prevention. These logs roll over automatically and are not used for marketing.

If you give us your email address through the "Monthly collector digest" signup, we store it so we can send you the monthly digest you asked for. We do not share or sell email addresses. Every digest has an unsubscribe link, and clicking unsubscribe permanently removes you from the list.

Trackers — Portfolio, Watchlist, Set Completion, Smart Alerts, Card Show Planner — require an account so we can save your work to you and not someone else. Authentication is handled by Supabase Auth. We use it because it is reputable and we did not want to roll our own.

When you create an account we store:

• Your email address (or a Google-issued identifier if you sign in with Google).
• A user ID (random, opaque) we use internally to link your portfolio, watchlist and alerts to you.
• An optional display name and chosen Pokémon avatar (kept in user metadata).
• Whatever you put into the trackers — cards you own, watched cards, set progress, alert thresholds.
• Your email preferences (digest on/off, alert delivery cadence).

We do not collect, ask for, or store any payment information. We never request your real name, address, date of birth or phone number.

If you sign in with Google, Google sends us your email address and a Google account identifier. We do not get access to your contacts, calendar, Drive or anything else.

We use a small number of cookies, all of which fall into the "strictly necessary" or "analytics" categories under UK / EU rules:

• Authentication cookies — only set if you sign in. These keep you logged in. Provided by Supabase.
• Analytics cookies — Google Analytics first-party cookies that count visits.
• Affiliate attribution — when you click an eBay listing link, eBay drops their own cookie so they can attribute the sale to us. We never see who clicked or what you bought; we only see aggregate commission totals.

We do not use behavioural advertising cookies, retargeting pixels, or cross-site tracking.

The "Ask Me Anything" chat is anonymous. Each chat session gets a random session ID generated in your browser. We do not link conversations to your account or your email. Your messages are sent to our AI provider (Anthropic) so it can generate a response; we do not use the conversations to train any model.

Please do not put personal information into the chat — it is not the right tool for that.

We do not sell or rent data. Some services are essential to running the site:

• Vercel — web hosting. Sees standard request logs.
• Supabase — database and authentication. Stores your account, tracker data and email preferences.
• Google Analytics — anonymous traffic measurement.
• Anthropic — powers the AI assistant. Receives the chat messages you send so it can respond.
• Google Sign-In — optional, only if you choose to sign in with Google. Google receives the standard data needed to authenticate you.
• eBay Partner Network — affiliate links to eBay listings. Sets a cookie when you click through.

Newsletter email addresses — until you unsubscribe.

Account data — until you delete your account (see below). Portfolio / watchlist / alert data lives alongside your account and goes with it.

Analytics data — retained per Google Analytics' default (currently 14 months).

AI chat sessions — not stored against your identity. Anthropic retains the raw API calls per their data policy.

You have rights under UK GDPR (and equivalent rights under EU GDPR and most other regimes):

• Access — ask what we hold about you.
• Correction — fix anything that is wrong.
• Deletion — have your account and all associated tracker data removed.
• Portability — get a copy of your tracker data in a portable format.
• Withdraw consent — unsubscribe from email, opt out of analytics, delete your account.

Email [email protected] and we will action requests within 7 days. You can also delete your own account directly from Settings.

If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

PokePrices is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have collected data from a child, contact us and we will remove it.

Our hosting providers (Vercel, Supabase) and analytics provider (Google) may store and process data in regions outside the UK / EU, including the United States. These providers use standard contractual clauses and other recognised safeguards for international data transfers.

If we make material changes to how we handle data, we will update this page and refresh the date at the top. For significant changes that affect existing account holders, we will also send a notice via the newsletter or email if you have one on file.

Anything privacy-related: [email protected]. Real human, reads every message.