Privacy Policy

RareDex (“we,” “us,” or “our”) is a Pokemon TCG price intelligence tool. This policy explains what data we collect, why, how long we keep it, and your rights regarding that data. We believe in transparency and collecting only what we need.

We collect the following data:

• Email address — when you join our waitlist or create an account
• Account information — managed by Clerk (our authentication provider), including display name and login method
• Portfolio data — cards you add to your collection, purchase prices, and notes (when this feature launches)
• Usage data — pages visited and features used, collected via privacy-respecting analytics

We do not collect payment card numbers directly. All payment processing is handled by Stripe.

• Send you launch updates and product announcements (waitlist)
• Provide and personalize the RareDex service
• Process subscription payments via Stripe
• Improve the product based on aggregated usage patterns

We never sell your personal data to third parties.

We use the following services to operate RareDex:

• Clerk — authentication and account management
• Stripe — payment processing (when subscriptions launch)
• Resend — transactional email delivery
• Vercel — hosting and analytics

Each service has its own privacy policy. We have or will sign Data Processing Agreements with each provider before processing EU user data through paid tiers.

We use essential cookies for authentication (Clerk session cookies). If we add analytics that use cookies, we will update this policy and provide a consent mechanism for EU users. We do not use advertising or tracking cookies.

We retain your data for as long as your account is active or as needed to provide the service. Waitlist emails are retained until you unsubscribe or request deletion. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights:

• Access — request a copy of the data we hold about you
• Deletion — request that we delete your personal data
• Correction — request correction of inaccurate data
• Portability — request your data in a machine-readable format
• Opt-out — unsubscribe from marketing emails at any time

For GDPR (EU) and CCPA (California) requests, we will respond within 30 days.

RareDex is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website. The “last updated” date at the top reflects the most recent revision.

For privacy questions, data requests, or concerns, email us at privacy@raredex.cards.