Privacy

Information you provide

Creating an account requires an email address and a password, handled by Supabase Authentication. Setting up your profile asks for a first name (used only to greet you) and a username (how friends find and see you inside PullFolio). You can also set a display name and an appearance preference for the site background.

Collection and app-usage data

To provide PullFolio's features, we store the data you create while using the app: your card collection and quantities, binders and how you've arranged them, your wishlist, purchases you've logged, Rip Pack opening sessions, collection goals, and Trade Watch matches and friend connections. Current access rules (Row Level Security) restrict this data to your account. A user you connect with as a friend currently receives only the limited profile information (your username and display name), feature data — such as Trade Watch matches — that PullFolio provides for that connection, and read-only access to whichever of your binders (set, custom, or Favorites /Trade/Flip) you haven't marked private, which show the cards in that binder and nothing else. Friends never see your purchases, spending, cost or acquisition details, condition notes, or any binder you've marked private. Removing a friend removes their access immediately.

Authentication and database infrastructure

PullFolio runs on Supabase, which processes your account, authentication, and database information to operate the app. Supabase sets a first-party session cookie so you stay signed in between visits. PullFolio does not set cookies for advertising or marketing.

Card and set images are loaded directly from our data provider's image hosting when you browse your collection. Loading an image is a normal web request, so that host receives standard technical request information — such as your IP address, browser information, and the specific image URL requested — the same way any website image works.

Hosting and traffic analytics

PullFolio is hosted on Vercel, which also provides Vercel Web Analytics — an aggregated Web Analytics tool. It collects information such as page views and which routes were visited, the referring site, an approximate geographic region (not precise location), and your browser, operating system, and device type.

This analytics integration does not use third-party advertising cookies, and it does not attach page-view data to your PullFolio account or profile — the integration isn't connected to your email, username, or collection data. We rely on Vercel's own published documentation for how it handles this data on its end, and we don't make claims about it beyond what Vercel states.

How information is used and shared

Information is used to operate PullFolio (storing and displaying your collection, binders, wishlist, and trades), to keep your account secure, to troubleshoot problems, and — through the aggregated analytics above — to understand which pages are used and improve the app.

We do not sell your personal information. Running PullFolio does require working with a small number of service providers, each of which processes some information to do their part: Supabase processes account, authentication, and database information needed to operate the app; Vercel hosts the app and provides the aggregated Web Analytics described above; our card and set image hosts receive standard technical request information when your browser loads an image, as described above; and Facebook, Instagram, and TikTok each receive information under their own policies only if you choose to visit those external links. We can't speak for how those external providers may change their own practices — see their own policies for that.

External links

PullFolio links out to its official Facebook, Instagram, and TikTok pages. Visiting Facebook or Instagram is governed by Meta's own privacy practices; visiting TikTok is governed by TikTok's own privacy practices, a separate company. Neither is covered by this page.

Account and data deletion

PullFolio doesn't have a self-service delete-account button yet. To request deletion of your account and its associated data, email support@tcgpullfolio.com. If possible, send the request from the email address on your PullFolio account — we may ask you to verify you own the account before deleting anything. Please never email your password; we will never ask for it. We don't have an implemented timeframe to promise for how quickly a deletion request is handled.

Contact

Questions about this page, or about your account and data, can be sent to support@tcgpullfolio.com.