Privacy Policy

PokeFocus is operated by Jones Collectibles LLC. In this policy, PokeFocus, we, us, and our refer to Jones Collectibles LLC.

Privacy questions and requests can be sent to support@pokefocus.com.

Account information, such as email address, name, profile details, authentication identifiers, and account metadata.

If you sign in with Google or Apple, we receive your name and email address from that provider. With Sign in with Apple, Hide My Email lets you share a private relay address instead of your real one.

Subscription and billing records processed by Stripe and, for Managed Payments, Link as merchant of record. We do not store your full payment card number.

For subscriptions purchased in the iOS app, we receive transaction and subscription status information from Apple. We do not receive your payment card details from Apple.

Saved inspection data, including tracked cards, favorite listings, rejected listings, rejection history, hidden seller rules, listing notes, selected filters, listing URLs, item IDs, titles, sellers, prices, listing types, and related card context.

Usage and device information, including pages visited, features used, searches, filters, outbound marketplace clicks, browser type, operating system, device type, screen size, IP address, cookies, logs, analytics events, and diagnostic exception details.

Provide, operate, secure, and improve PokeFocus.

Authenticate users, manage accounts, process subscriptions, and provide support.

Personalize tracking, saved filters, favorites, rejected listings, hidden seller rules, and listing review memory.

Measure product usage, understand new-user flow, debug marketplace links, detect abuse, monitor reliability, and improve performance.

Comply with legal obligations and enforce our Terms.

Clerk provides authentication and account management for sign-in with email and password, Google, and Apple.

Google and Apple provide optional sign-in and share your name and email address with us, or an Apple private relay address if you use Hide My Email.

Stripe processes subscriptions, billing, payment methods, invoices, taxes, and related payment records. For Managed Payments, Link by Stripe independently acts as merchant of record, manages transaction support, and provides order and subscription management.

Apple processes subscriptions purchased in the iOS app and provides us with transaction and subscription status.

PostHog provides product analytics, session replay, Web Vitals, and client error tracking, plus server-side exception diagnostics that omit request headers, cookies, query strings, and account identifiers.

Resend may provide transactional and support email.

eBay and TCGplayer may process information when you open marketplace links or interact with their services.

Vercel and database providers may process information needed to host, store, and operate the Service.

PokeFocus links out to marketplaces such as eBay and TCGplayer. Marketplace purchases, bids, payments, shipping, returns, and account actions happen on those third-party services.

TCGplayer links are affiliate links. PokeFocus may earn a commission when you click or buy through them, at no additional cost to you. eBay links are not affiliate links.

We may record outbound marketplace click events so we can measure affiliate performance, troubleshoot links, and understand which product surfaces are useful.

PokeFocus does not submit bids, place orders, or perform purchase actions on your behalf.

PokeFocus retrieves public marketplace, card catalog, and sold-market data to show listing context.

When you click a marketplace link, that marketplace may receive information according to its own privacy policy. PokeFocus may record the click so we can measure usage, affiliate attribution, and link reliability.

Server-side marketplace data requests do not include your saved rejected listings, hidden seller rules, notes, or personal review history unless needed to provide an account-specific feature you requested.

PokeFocus offers a public, read-only API (pokefocus.com/api/v1) and MCP server (pokefocus.com/api/mcp) that AI assistants and developer tools use to look up Pokémon card and sealed product prices, recent sales, sets, Market Pulse, and listings. They require no account, API key, or cookies, and responses contain no personal information about PokeFocus users.

A request sends us the search filters or tool arguments that you or your assistant chose, plus standard connection data such as IP address, user agent, and request time. We do not receive your conversation with an assistant beyond those arguments.

We use the IP address to apply per-client rate limits. Those counters are held in server memory and reset within about a minute. Our hosting provider keeps request logs, including the requested URL, for operations and security, which we retain as described under Data Retention.

We record each API request and tool call as an anonymous usage event in PostHog, our product analytics provider: the tool, the arguments it was given, whether it succeeded, how long it took, how many results it returned, and the client software named by the MCP client or user agent. These events do not include the IP address and are not linked to a person or a PokeFocus account. We use them to understand and improve the API.

Results include eBay links (ebayUrl) and TCGplayer affiliate links (tcgplayerUrl and TCGplayer offers). When someone opens one, eBay or TCGplayer receives the click under its own privacy policy. For TCGplayer links, we may receive affiliate reports that do not identify the person.

Essential cookies and similar storage support authentication, security, fraud prevention, and the preferences needed for the Service to work. These essential technologies do not depend on your analytics setting.

PokeFocus uses PostHog browser analytics, session replay, Web Vitals, and client-side exception capture by default to understand how the Service is used and to find problems. PostHog stores an analytics identifier in cookies or similar browser storage.

Browser analytics may include page views, feature usage, search and filter behavior, onboarding steps, outbound marketplace click events, high-level device or browser information, and client error details. Session replay masks text and form inputs. If you turn analytics off, browser capture stops and remains off in that browser until you turn it back on; an earlier choice to decline analytics is kept as turned off.

Separately, PokeFocus may send operational server exception details to PostHog even when browser analytics are turned off. Those reports are limited to a credential-redacted error and stack, route template, HTTP method, app environment, and release, and do not include request headers, cookies, query strings, account identifiers, or a browser analytics identifier.

You can turn browser analytics off or back on in the analytics settings on the PokeFocus privacy page (pokefocus.com/privacy). Turning analytics off does not affect account, security, subscription, or saved-review functionality.

We do not sell your personal information.

We share information with service providers needed to run PokeFocus, when you direct us to interact with eBay or another marketplace, when legally required, to protect users or the public, to enforce our Terms, or in connection with a business transfer.

Account records are retained while your account is active.

Saved inspection data, favorites, rejected listings, hidden seller rules, and review history are retained while your account is active unless deleted through available controls or support.

After we verify and complete an account-deletion request, we target removal of primary account and saved-review records within 30 days. Residual encrypted backups may remain until they age out, generally within 90 days.

Billing and transaction records may be retained for up to seven years where needed for accounting, tax, dispute, fraud-prevention, and legal compliance. Deleting an account does not require us to delete records we must lawfully retain.

A separate Link data-deletion request is handled by Link or Stripe under its policies and can cancel Managed Payments subscriptions and delete associated Stripe transaction objects.

Product analytics records are retained for up to 24 months, security and diagnostic records for up to 12 months, and support correspondence for up to 24 months, unless a shorter provider setting applies or a longer period is reasonably required for an active security incident, dispute, or legal obligation.

We use reasonable technical and organizational safeguards to protect information. No online service can guarantee perfect security.

You are responsible for keeping your account credentials secure and for reviewing third-party marketplace pages before you buy, bid, or otherwise act on a marketplace listing.

You can manage tracked cards, favorites, rejected listings, hidden seller rules, and saved review history through available product controls.

You can delete your account yourself: in the iOS app under Profile > Delete account, or in web account preferences. Deleting your account cancels any Stripe subscription, deletes your card-inspection photos and records, deletes your Apple subscription records, and removes or de-identifies your account and its remaining saved data.

Deleting your account does not cancel an Apple subscription; cancel it in the Settings app on your iPhone or iPad (tap your name, then Subscriptions). If you delete an account that uses Sign in with Apple from the iOS app, PokeFocus also asks Apple to revoke its access to your Apple Account.

To request access, correction, export, or deletion, email support@pokefocus.com from your account email with the subject "Privacy request" and state the request you want us to complete. We may ask you to verify account ownership before releasing or deleting data.

For a verified export request, we will provide the account and saved-review data reasonably available to us in a portable format such as JSON or CSV. For a verified deletion request, we will remove or de-identify the account, saved-review data, and directly associated analytics identifiers where feasible, subject to the retention exceptions above.

We target a response and completion within 30 days after verification, or within the period required by applicable law. If we need more time or cannot delete a record, we will explain the reason and available next steps.

Depending on your location, you may also have rights to object to or restrict processing, withdraw consent, or appeal a privacy-request decision. You may contact your local data-protection authority where applicable.

PokeFocus is not directed to individuals under 18. We do not knowingly collect personal information from children under 18.

We may update this Privacy Policy from time to time. We will post material changes on this page and update the date above.

Questions can be sent to support@pokefocus.com.