Privacy Policy
What RareTracker collects, why, which providers process it (hosting, payments, email) and how to export or delete your data.
Last updated:
This policy explains what personal data RareTracker ("we") collects when you use raretracker.com, how we use it, and your rights.
What we collect
- Account data — your email address, name and password hash when you sign up (or the profile details your sign-in provider shares, such as Google).
- Portfolio data — the cards and sealed products you add, with quantity, condition, optional purchase price and the portfolios you organise them into. If you use RareTracker without an account, your portfolio and watchlist are stored only in your browser (local storage) and never sent to us until you sign in and import them.
- Price alerts — the cards, target prices and language of any price alerts you set (Pro).
- Billing data — if you subscribe to Pro: your plan, billing dates and payment status. Card details are entered on and stored by our payment provider, not by us.
- Waitlist data — the email address you submit to join the restock-alert waitlist.
- Support messages — anything you send us through tickets or email.
- Usage data — pages visited, referrer, device and browser type, and approximate location derived from your IP address, collected by our analytics provider when enabled.
How we use it
- To run your account and portfolio and keep them secure.
- To email you about your account and subscription, to send the price-alert emails you set up, and — only if you joined the waitlist — when restock alerts launch.
- To understand which pages are useful and improve the site.
- To prevent abuse and comply with the law.
We do not sell your personal data.
Cookies
We use essential cookies to keep you signed in and remember your language. If analytics is enabled we use Google Analytics cookies to measure traffic. When you click an affiliate link (TCGplayer, eBay, Amazon), that retailer or its affiliate network may set its own cookies to attribute your purchase; their privacy policies apply.
Service providers
We share data only with providers that help us operate the site, under their own privacy terms: Cloudflare (hosting and database), Stripe (payments, if you subscribe), Google (analytics and optional sign-in) and our email provider (Resend or Cloudflare Email, for account and price-alert emails). Card prices come from TCGplayer market data and licensed price-history providers; no personal data is sent for that.
Retention
We keep account and portfolio data until you delete your account. Waitlist emails are kept until alerts launch or you ask us to remove yours. Server logs and analytics data are retained for a limited period.
Your rights
You can view and edit your profile and portfolio at any time, export your portfolio as CSV (Pro), and delete your account yourself from Portfolio → Account & plan. You can also ask us to export or delete your data by emailing contact@raretracker.com. Depending on where you live (for example the EU/UK under GDPR or California under the CCPA) you may have additional rights, which we will honour.
Children
RareTracker is not directed at children under 13, and we do not knowingly collect their personal data.
Changes
We may update this policy. The date above shows the latest revision; material changes will be announced on the site.