Privacy Policy

Last updated: May 2026

1. Who We Are

Vaultset is a trading card collection and marketplace platform. We help collectors manage their inventory, track market values, and connect with other collectors. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

We collect the following information when you use Vaultset:

  • Account information — your email address, username, and password (stored securely and hashed).
  • Collection data — card records you add to your inventory, including condition, grade, pricing, and personal notes.
  • Usage data — basic session and authentication data required to keep you logged in.

We do not collect payment information, physical addresses, or any data beyond what is necessary to operate the platform.

3. How We Use Your Information

Your information is used to:

  • Create and maintain your account.
  • Display your collection and listings to you and, where applicable, to other users.
  • Provide core platform features such as inventory management and marketplace browsing.
  • Communicate with you regarding your account if necessary.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Public Information

When you list a card for sale or trade, certain information becomes visible to other registered users — including the card details, condition, grade, and asking price. Your username is associated with your public listings. Cards you keep private (not listed for sale or trade) are visible only to you.

5. Data Storage & Security

Your data is stored securely using Supabase, a cloud database platform with row-level security enforced at the database level. Passwords are never stored in plain text. We take reasonable precautions to protect your information, but no system is completely immune to security risks.

6. Data Retention & Deletion

You may delete your account at any time through the Account Settings page. Upon deletion, your personal information and collection data are permanently removed. Some anonymized aggregate data (such as total card counts used in platform statistics) may be retained.

7. Third-Party Services

Vaultset uses the following third-party services to operate:

  • Supabase — database and authentication.
  • Pokémon TCG API — card data and imagery. No personal information is shared with this service.
  • Vercel — hosting and deployment.

8. Contact

If you have questions or concerns about your privacy, please reach out through our contact page.