Privacy Policy

Who we are

Bull Run TCG is an app for tracking trading card prices and deciding what to do about them. This policy covers the app and this website. Questions go to hello@bullruntcg.com.

What we collect

Account information

Your email address and a securely hashed password, handled by our authentication provider. If you sign in with Apple or Google, we receive the identifier they give us and your email — nothing else from those accounts.

What you put in the app

Cards you add to your collection, the condition and purchase price you record, the answers you give in the grading questionnaire, and any lists or notes you create. This is the substance of the product, and it's stored against your account so it's there when you sign back in.

Card photos and scans

If you use the photo features, images are sent for analysis to identify the card or assess its condition.

We keep these images, and we use them to improve how the app recognises and grades cards. When you confirm which card a scan matched, or correct a wrong match, that choice is recorded too — it's the most useful signal we have for making recognition better, and it's why the app improves over time.

Photos are stored against your account so you can see your own scan history. They're used for improving our card recognition and condition assessment only. They aren't sold, aren't shared with advertisers, and aren't used to build any profile of you.

You can ask us to remove your photos from future training at any time by emailing us, and deleting your account removes them entirely.

Usage information

Which screens you open and which features you use, so we know what to improve, plus basic technical information like device type, operating system version, and app version, which we use for diagnosing crashes.

What we don't collect

• Payment card numbers — subscriptions are billed by Apple and Google, who never share your card details with us
• Precise location
• Contacts, photo library beyond images you deliberately capture or select, microphone, or health data
• Your eBay account. You never sign into eBay through us, and we never see your eBay credentials or purchases

Why we collect it

• To run your account — signing you in and keeping your collection available across devices
• To provide the features — pricing, grade estimates, deal results, and alerts
• To improve the app — understanding which features are used and where things break
• To communicate — service messages, and product emails you can unsubscribe from at any time

Who we share it with

We do not sell your personal information, and we don't share it for advertising.

We use a small number of service providers who process data on our behalf, under contract, and only to provide their service to us:

• Supabase — database, authentication, and hosting for your account and collection data
• Anthropic — analysis of grading photos and generation of plain-language deal summaries. Anthropic does not use data sent through their API to train their models. Our own use of your images to improve our card recognition is described above
• Apple and Google — app distribution, subscription billing, and crash reporting

We'll also disclose information if the law requires it, or to protect someone's safety or our rights.

eBay links and commission

We take part in the eBay Partner Network. When you tap through to an eBay listing from the app or this site and make a purchase, eBay pays us a commission. This costs you nothing extra, and it never affects which listings we show you or how we rank them.

Tracking is handled entirely by eBay through the links themselves. We don't pass eBay any information about you, and we don't receive information about what you bought — only aggregate commission totals. Once you're on eBay, eBay's privacy notice applies.

Where card prices come from

Pricing is built from publicly available sales and listing data from marketplaces and card pricing services. It concerns cards, not people. Where seller identifiers appear in that data, we use them only to detect patterns of suspicious or counterfeit listings so we can filter them out, and we remove them when a marketplace tells us that user has closed their account.

Age requirement

You must be 13 or older to create an account. We don't knowingly collect information from children under 13. If you believe a child under 13 has given us information, email us and we'll delete it promptly.

If you're under 18, please get a parent or guardian's permission before subscribing to a paid plan.

How long we keep it

Account, collection, and photo data is kept while your account is active. If you delete your account, we remove it within 30 days, except where we're required to keep records for tax or legal reasons. Aggregate market data that doesn't identify you may be kept indefinitely.

Images already incorporated into a trained recognition model can't be extracted back out of it, so while we delete your stored photos, we can't reverse their past contribution to model improvement. This is why you can opt out of future training use at any time.

Your choices

• See or correct your data — most of it is editable in the app; email us for anything else
• Delete your account — email us from your account address and we'll handle it
• Export your collection — ask and we'll send it to you
• Opt out of photo training use — email us and we'll exclude your images from future model improvement
• Turn off notifications — in the app, or in your device settings
• Unsubscribe from emails — link at the bottom of every one

Depending on where you live, you may have additional rights over your data. Email us and we'll honour them regardless of where you are.

Security

Data is encrypted in transit and at rest, access is limited to what's needed to operate the service, and we don't hold payment details. No system is perfectly secure, but we'd rather hold less of your information than defend more of it.

Changes

If we change this policy we'll update the date above, and we'll tell you in the app if the change is significant.