Privacy Policy

• Account information. Your email address, and either a password or, if you sign in with Google, the basic profile information (name, email, profile photo) Google shares with us. We use Supabase for authentication and never see or store your Google password.
• Your collection data.The cards, parallels, quantities, and chases you add to Lockbox. This is scoped to your account — other collectors can't see it.
• Photos you upload. If you take or upload a photo of a card while adding it to your collection, that photo is shared publiclyas a reference image for that card in Lockbox's catalog — visible to anyone browsing the catalog, not just you. Please only upload photos of the card itself.

Solely to run Lockbox: to sign you in, show your own collection back to you, and generate the recommendations and insights the app is built around. We don't sell your data, and we don't use advertising or analytics trackers of any kind today.

Lockbox runs on a small number of third-party services that necessarily process this data to make the app work: Supabase (authentication, database, and photo storage), Google (only if you choose to sign in with Google), and Vercel (hosting). Lockbox's card catalog is built using data from CardSight AI, a third-party catalog provider — this only involves card/set data, never your personal information.

We use one cookie, set by Supabase, to keep you signed in between visits. It's required for the app to work and isn't used for advertising or tracking.

Lockbox doesn't yet have a self-service way to delete your account or data. Email thelock@gmail.com and we'll take care of it directly.

Lockbox isn't directed at children under 13, and we don't knowingly collect information from them.

If this policy changes, we'll update the date at the top of this page.

Questions about this policy or your data? Email thelock@gmail.com.