Privacy Policy
TCG Portfolio ("the app") is operated by Xiphias Tech, Belgium ("we"). This policy explains what data the app and the website tcgportfolio.app handle, and why. The short version: we store your account and your collection so the app can work, we do not run ads, and we do not sell or share your data with advertisers.
Data we store
- Account data: your email address and a securely hashed password, used to sign you in and sync your collection across devices.
- Collection data: the cards, sets, and sealed products you add, including quantities, finishes, and conditions, plus the value history of your portfolio. This is the product; without it there is nothing to show you.
All data is transmitted over HTTPS and stored on servers we operate in Belgium (European Union).
Card scanning
When you scan a card, the photo is sent to our recognition service, which forwards it to Google's Gemini API to identify the card. Photos are processed in memory and are not stored on our servers. We use Google's paid API tier, under which Google does not use submitted content to train its models (see Google's Gemini API terms).
What we do not do
- No advertising and no ad networks.
- No sale or sharing of personal data with third parties for their own purposes.
- No tracking SDKs or third-party analytics in the app.
- No location, contacts, or other device data collection. The camera is used only when you scan a card.
Service providers
We use Cloudflare to route and protect traffic to our servers, and Google's Gemini API for card recognition as described above. Both act as processors for the purposes described in this policy.
Your rights (GDPR)
You can access, correct, export, or delete your data. Deleting your account removes your account data and your collection permanently. For any request, or to delete your account, contact us at hello@tcgportfolio.app and we will handle it within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Data retention
Your data is kept for as long as your account exists. When your account is deleted, the associated data is deleted with it.
Children
The app is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes materially, we will update this page and the "last updated" date above.