Privacy notice

1. Who we are

The controller for the processing in this notice is Cardseekers, privacy@cardseekers.nl. We have not appointed a data protection officer. You can reach us about anything in this notice at privacy@cardseekers.nl.

When a vendor records data of their customers or staff in the till, the vendor is the controller of that data and we process it for them (see Article 13 of the terms and conditions).

2. In short

• We use your email address and password to give you an account, and the cards you keep to show your collection and its value.
• We keep the photos you take with the card scanner. We use them to recognise your cards and, unless you switch this off, to improve card recognition for everyone. You can switch that off at any time in Settings › Privacy.
• We never sell your data, never show advertising and don’t use tracking or analytics cookies.
• You can see, correct, download and delete your data, and object to how we use it.

3. What we collect, why, and on which legal basis

Your account: email address, password (stored only as a salted hash, so we can’t read it), name or business name, account type, whether you are 16 or older, your settings, the version of the terms you accepted, when you signed up and when you were last active. We use this to provide your account (legal basis: performing our agreement with you, Article 6(1)(b) GDPR).

Your collection and use of the Service: the cards you keep, price alerts, achievements and levels, your sharing settings and how often your shared page was viewed (not by whom), check-ins at booths, and the weekly summary emails. We use this to provide these features (performing our agreement).

Your scans: each Scan Photo, a random identifier of your device or browser, and information about the scan (what was read from the card, the suggested cards and how certain each was, which card you chose or corrected). We use them to recognise your cards (performing our agreement). We also use them to train and test our card recognition, so it works better for everyone (our legitimate interest, Article 6(1)(f) GDPR) — unless you switched training off or are under 16.

Security: the email address and IP address of failed sign-in attempts, and your sign-in session. We use these to protect accounts and prevent misuse (our legitimate interest).

Feedback: what you write, the page you were on, the app version and your browser or device type. We use this to answer you and to improve the Service (our legitimate interest).

Optional features you switch on yourself: level-ups posted in our Discord server, and letting search engines find your shared collection (your consent, Article 6(1)(a) GDPR). You can switch them off at any time in Settings; that doesn’t affect what happened before.

Vendors: business name, stock, sales, purchases, events, booth details and logo, to provide the till (performing our agreement).

Backups of our database and aggregated statistics, to keep the Service running and understand how it is used (our legitimate interest).

4. Our legitimate interests

Where we rely on our legitimate interests, these are:

• training and testing our card-recognition models and indexes with Scan Photos and your confirmations, so recognition is accurate for everyone;
• securing the Service and preventing misuse;
• making backups;
• aggregated statistics about how the Service is used;
• handling feedback.

We weighed these interests against your interests and rights, and added safeguards:

• you can switch training off at any time, without giving a reason;
• scans of people under 16 are never used for training;
• Scan Photos are never published; trained models and indexes contain only numbers computed from images of cards, without account, scan or device identifiers;
• originals are deleted after 180 days (30 days if they may not be used for training) and training copies after at most three years;
• only members of the Cardseekers team can view Scan Photos, to check and label scans and handle support and misuse; photos that show people are deleted when found.

You can ask us for a summary of this assessment at privacy@cardseekers.nl.

5. Your right to object

We use your Scan Photos and corrections to train card recognition, and some other data for security, backups, statistics and handling feedback, based on our legitimate interests. You can object to this at any time.

For training you don’t need to give a reason, and we always honour it: switch off “Use my scans to improve recognition” in Settings › Privacy, or email privacy@cardseekers.nl. We then remove your Scan Photos from our training collection within 30 days, and they are not used for new versions of our models or indexes. Models and indexes that already exist cannot unlearn a photo.

For the other processing based on our legitimate interests, we stop unless we have compelling legitimate grounds that override your interests, rights and freedoms, which we will then explain to you, or the processing is needed for a legal claim.

6. Who receives your data

Service providers that process data on our behalf, under a data processing agreement:

• Cloudflare, Inc.: hosting, databases, file storage (including Scan Photos), content delivery, logs, and the artificial-intelligence models that read the text on cards;
• Resend, Inc.: sending our emails;
• GitHub, Inc.: our private issue tracker. When we work on your feedback, we copy the text, the page and the app version, without your name, email address or browser details;
• Anthropic, PBC: an AI coding assistant that may be used to work on feedback, with the same copied text.

Others that decide about the data themselves (independent controllers):

• Discord: if you switch on level-ups, your name, level and a summary are posted in the Cardseekers community server;
• Stripe: card payments at a vendor’s booth, through the vendor’s own Stripe account;
• Apple: distribution of the iPhone app through the App Store and TestFlight;
• hosts of card images (such as images.pokemontcg.io and images.scrydex.com): your browser or app loads card images from them directly, so they see your IP address and browser details.

Other users and the public see only what you choose to share: your shared collection or your booth page. Vendors see how many people checked in at their booth, never who. Trained models and recognition indexes are published without any personal identifiers.

We give data to authorities only when the law requires it. We never sell personal data.

7. Transfers outside the European Economic Area

Cloudflare, Resend, GitHub and Anthropic are based in the United States and may process data there. We rely on the EU-US Data Privacy Framework for providers certified under it, and otherwise on the standard contractual clauses of the European Commission (Commission Implementing Decision (EU) 2021/914) in our agreements with them. You can check certifications at dataprivacyframework.gov and ask us for a copy of the safeguards.

8. How long we keep your data

• Account, collection, settings, alerts, achievements and shares: as long as your account exists.
• Original Scan Photos: 180 days after the scan; 30 days if they may not be used for training.
• Training copies of Scan Photos: as long as we use them to train or test recognition, and at most three years after the scan.
• Scan information (what was read and chosen): as long as your account exists; after that without any link to you (see the next section).
• Failed sign-in attempts: 24 hours. Sign-in sessions: 30 days.
• Feedback: as long as your account exists. A copy of the text, without your name or contact details, can stay in our issue tracker.
• Level-up posts in Discord: until you switch level-ups off or delete your account.
• Reports of illegal content: as long as needed to handle them, and at most two years.
• Backups: one year.
• Data a vendor records in the till: as long as the vendor’s account exists (vendors keep their own records).

9. Deleting your account or withdrawing

You can delete your account at any time in Settings (“Delete my account”). We then delete your account, collection, settings, feedback, shares and Discord posts. Your scans are kept only as training material if you allowed training, and then without your account and without the device identifier (pseudonymised). A photo can sometimes still show who took it, so we keep treating these scans as personal data and your rights continue. Scan Photos you did not allow for training are deleted.

Collectors can withdraw from the agreement within 14 days of signing up (Settings › “Withdraw from the agreement”). We then also delete every Scan Photo you took.

Copies in backups disappear within one year.

10. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to object (see “Your right to object”) and to receive it in a commonly used format (data portability). Where we rely on your consent, you can withdraw it at any time in Settings. Many things you can do yourself in Settings; for everything else, email privacy@cardseekers.nl. We reply within one month and may ask you to confirm that the account is yours.

If you are under 16, your parent or guardian can also exercise these rights for you.

If you think we don’t handle your data lawfully, please tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the authority in your own country.

11. Children

You can create an account yourself from the age of 16. Younger collectors need a parent or guardian who has read the terms and agrees. For people under 16, scans are never used for training, and Discord level-ups and search-engine indexing are not available.

12. What you have to give us

An email address and a password are needed to create an account; without them we can’t give you one. Scan Photos are needed to use the card scanner, but you can always search for cards by name or number instead. Everything else is optional.

13. Automated decisions

We don’t make decisions about you based solely on automated processing that have legal effects or similarly affect you. The Service does apply automatic limits (for example on sign-in attempts and scans per day) and refuses names that are on a list of words that are not allowed.

14. Cookies and storage on your device

We use one cookie, to keep you signed in (30 days). The website and app also store your preferences, offline data, scans you made before signing in, and a random device identifier, which we use to link scans and corrections made on that device to your account and to prevent misuse of the scanner. These are strictly necessary for the Service you asked for, so they need no consent (Article 11.7a of the Dutch Telecommunications Act). We don’t use tracking, advertising or analytics cookies.

15. Security

We protect your data with encrypted connections, passwords and session tokens stored only as hashes, encrypted payment keys, access only for team members who need it, and backups. If a data breach is likely to put you at risk, we tell you and the Dutch Data Protection Authority as the law requires.

16. Changes to this notice

We update this notice when our processing changes. The version and date are at the top; we tell you about important changes in the Service or by email.