Privacy Policy

Account information.When you create an account, we collect the email address and password you sign up with. Authentication is handled by Supabase; we don't see or store your raw password ourselves.

Card photos. When you scan a card, the photo you take or upload is stored in our cloud storage (Supabase Storage) and associated with your account. Photos may be resized and converted (e.g. HEIC to JPEG) on your device before upload, purely for file-size and compatibility reasons.

Collection data. Details you enter about your cards — condition, serial number, acquisition date, notes, grading company, cert number, and grade/subgrades if the card is professionally graded — are stored against your account so your collection and its estimated value can be tracked over time.

Scan history.We keep a log of your scans (the photo, the AI model's raw identification response, and any correction you make to it) to power the recognition feature itself and to improve future matching accuracy.

Wishlist and price-watch data. Cards you add to your wishlist or flag for price alerts are stored against your account.

Subscription status. Whether you have an active subscription, and basic billing status (active, trialing, past due, canceled), is stored against your account. We do not directly collect or store your payment card details — see Third-Party Services below.

We do not currently use any analytics or tracking SDK (no Mixpanel, Segment, Amplitude, Google Analytics, or similar) anywhere in the app, and we don't collect device advertising identifiers, location data, or browsing history.

We use the information above to:

• Operate your account, your collection, and your scan history.
• Identify the cards you photograph, using an AI vision model (see below).
• Estimate the market value of cards in your collection, using third-party pricing sources.
• Process and manage your subscription.
• Respond to support requests you send us.

We do not sell your personal data, and we do not use it for advertising or any ad-network integration — there is none in the app.

We share the minimum data necessary with a small number of service providers so the app can function:

• Supabase — hosts our database, authentication, and card photo storage.
• Anthropic (Claude API)— when you scan a card, the photo is sent to Anthropic's API for AI-based card identification (recognizing the wrestler, set, variation, and detecting/cropping multiple cards in one photo). Anthropic processes these images to return a recognition result to the app.
• RevenueCat— manages subscription entitlements across platforms. On mobile, purchases are billed directly through Apple's App Store or Google Play, not by us — RevenueCat and the platform store handle your payment details, and refunds, cancellations, and auto-renewal are managed through Apple's or Google's own subscription settings. On the web, subscription purchases are processed through Stripe as the payment gateway behind RevenueCat's web billing, and Stripe (not WrestleVault) handles your payment card details directly.
• Pricing data sources— to estimate what a card is worth, we query eBay's API, PriceCharting's API, and (where enabled) similar market-data sources. We only send catalog information (card name, set, year, brand, variation) to these lookups to find comparable listings — we do not send your personal information, account details, or collection contents to these providers; they are data sources we query, not services we hand your data to.

Most of the time, your scan photos are private to your account. There is one specific exception worth calling out clearly: when a card variation in our catalog doesn't yet have a curated reference photo, the app may show another collector a photo from one of your confirmedscans of that same card variation, as a visual reference so they can confirm their own scan matches the same card. This only ever happens with scans you've confirmed and saved to your collection (never a scan you rejected or merely previewed), and only for the specific card photo itself — never your account information, collection notes, or any other personal data alongside it. If you'd rather your scan photos never be used this way, contact us at support@wrestlevault.netand we will exclude your account's photos from this feature.

WrestleVault lets you publish your collection as a public link. This is off by default, it is a paid-subscriber feature, and nothing about your collection is publicly visible until you turn it on yourself.

When you create an account you choose a username. That username is permanent — it becomes the address of your Vault page and cannot be changed later, so pick one you're comfortable being seen publicly. Choosing a username does not publish anything on its own.

While public sharing is on, anyone who has your link can open your Vault at wrestlevault.net/u/your-username — no account, no app, and no approval from you. They can see the cards in your collection, the photos attached to them (your own scan photos where you have them, otherwise our catalog reference photo), each card's set, wrestler, variation and serial number, how many cards you own, and your first name if you've set one. Individual cards can also be shared on their own at wrestlevault.net/card/…, which includes a preview image designed to unfurl when the link is posted to social platforms or messaging apps.

Dollar values are a separate choice. Every time you share a Vault or a single card, we ask whether the person you're sharing with should see what your cards are worth. If you say no, both your collection's total value and each individual card's price are withheld by our servers — they are not sent to the page at all, so they can't be recovered by inspecting it. Because your shared pages always show current data, the most recent answer you gave applies to every link you've already shared, not just the next one.

Turning public sharing off in Settings makes your Vault and card pages stop resolving for everyone immediately. As with shared reference photos above, that stops future access but cannot un-see what someone already viewed, and we cannot control what happens to a link after you send it — a public link may be forwarded, saved, or indexed by others. Only share it with people you intend to see your collection.

We keep your account data for as long as your account is active, so your collection, scan history, and preferences stay available to you.

You can permanently delete your account from the app's Settings screen. Deleting your account removes your user record and cascades to delete your collection items, scan logs, and subscription entitlement record from our database, along with your underlying authentication record. This action is immediate and cannot be undone from within the app.

Note that a scan photo of yours that has already been surfaced to another collector as a shared reference photo (see above) may have been viewed by that collector before you delete your account; deleting your account removes the underlying data going forward but cannot retroactively un-show something already displayed to someone else.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. The in-app account deletion described above covers deletion directly. For any other request — including a request to access or export your data — contact us at support@wrestlevault.netand we'll handle it as promptly as we can.

WrestleVault is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@wrestlevault.net and we will delete it.

We may update this policy as the app changes. If we make material changes, we'll update the “Last updated” date above. Continued use of WrestleVault after a change means you accept the revised policy.

Questions about this policy, or a request related to your data, can be sent to support@wrestlevault.net.