Pokémon TCG Organizer

Privacy Policy

Last updated: 2026 · Português

This Policy describes how the Pokémon TCG Organizer app ("the App") collects, uses, and protects your personal data, in accordance with applicable data protection law (including Brazil's LGPD — Law No. 13.709/2018).

1. Data controller

2. Data we collect

• Account data (authentication): when you sign in via Google or Apple (Firebase Authentication), we collect the user identifier (UID), email, and display name provided by the provider.
• Collection content: binders, added cards, quantities, notes, binder pages and covers, plus snapshots of binders you choose to share.
• Usage and analytics data: App usage events collected via Mixpanel to understand which features are used and to improve the product.
• Crash reporting: technical information about failures and performance collected via Sentry (for example, device type, App version, and exception traces).
• Images: binder cover images you upload are stored in Firebase Storage. The card scanner processes camera images locally on the device (on-device OCR); those images are not sent to our servers.

3. Where data is stored

• Firebase Authentication — login credentials/identity.
• Cloud Firestore — your binders, cards, and quantities, isolated under your user identifier; and the public snapshots of shared binders (the shared_binders collection).
• Firebase Storage — binder covers you upload.

4. Purposes and legal basis

We process your data to: enable authentication and the operation of the App (performance of the service you requested); improve the product through analytics and crash reporting (legitimate interest / consent, as applicable); and enable binder sharing when you trigger that feature.

5. Binder sharing (public links)

When you share a binder, a read-only snapshot is created, accessible via a tokenized link. That snapshot contains only the binder's name and its cards with their quantities. No monetary value, purchase, or ROI information is included. Anyone with the link can view the snapshot.

6. Sharing with third parties

We do not sell your data. We use processors/subprocessors to provide the service, including Google Firebase (authentication, database, storage, and hosting), Mixpanel (analytics), and Sentry (crash reporting), which process data under their own policies.

7. Your rights

At any time, you may exercise the following rights:

• Access to the personal data we process about you.
• Correction of incomplete, inaccurate, or outdated data.
• Deletion of your data and account.
• Portability of your data to another service provider.
• Withdrawal of consent and objection to consent-based processing.

To exercise any right, contact the controller at the email listed in section 1.

8. Retention and deletion

We keep your data while your account is active. When you request account deletion, we remove the associated data, subject to legal retention obligations. Shared snapshots can be removed upon request to the controller.

You can delete your account and all data or just clear your collection data while keeping the account.

9. Security

We adopt technical and organizational measures to protect your data, including Firestore/Storage access rules that restrict each user to their own data area.

10. Minors

The App is not intended for use by minors without the supervision and consent of their legal guardians.

11. Changes

This Policy may be updated. Material changes will be published on this page, with the update date above.