Depending on how you use PokeGoTo, we may collect:

• Account data — email address, name, and profile image when you sign up or sign in with Google or Apple, plus your public handle and, if you add one, the contact detail you want trade partners to see.
• Saved app data — cards in your collection, watchlist, compare list, and search history when you are signed in, along with details you choose to add such as purchase price, purchase date, grade, and PSA certificate numbers.
• Images you upload — your profile picture and any photos you add to cards in your collection. These are resized and stored in our database, not with a separate image host.
• Community content — comments you post on cards, sets, showcases, and feed posts; who you follow; likes and reposts; and the activity entries generated when you add cards or share a purchase.
• Messages and trade offers — cards, sets, and posts you send to other members, messages in your shared inbox, and trade offers including any note you attach.
• Giveaway entries — that you entered, when you agreed to the rules, and any invite code used, so we can count referrals and pick winners.
• AI assistant chats — messages you send to the AI assistant and which page you were on, so it can answer in context. See third-party services below for where these are processed.
• Mobile push tokens — if you allow notifications in the mobile app, we store the device token needed to send them.
• Local browser data— if you use the site without an account, lists and history may be stored in your browser's local storage on your device only.
• Anonymous visitor profiles — if you browse without signing in, we assign a random first-party id in your browser (local storage) to count return visits, coarse device and theme preferences, searches you submit, and clicks on eBay affiliate links (including the page they came from). We do not store your IP address or full browser string for this feature, and we do not log your general page views or build an advertising profile.
• Technical data — IP address, browser or app type, and request timestamps in standard server logs. Each sign-in also records the IP address and browser string against your session so we can secure your account, and contact or feedback submissions store a one-way hash of your IP address to limit spam.

We use collected information to:

1. Provide and maintain your account and synced card lists.
2. Authenticate you and keep sessions secure.
3. Operate card price and listing features you request.
4. Run the community features you use — public profiles, showcases, comments, follows, trade offers, and messages between members.
5. Send notifications you have asked for, including mobile push and activity summaries, and administer giveaways you enter.
6. Understand which pages, searches, and listings are useful so we can improve the site.
7. Protect the service, investigate abuse, and comply with law.

We do not sell your personal information, and we do not share your collection, lists, or messages with advertisers. PokeGoTo does show ads through Google AdSense and earns commission on eBay affiliate links; those partners may use their own cookies, which you can control as described in our Cookie Policy.

PokeGoTo has public, social areas. If you create an account you get a public collector profile with your first name, handle, profile picture, showcase cards, cards marked for trade, and follower counts. Comments you post, cards you like, and showcase activity can also be seen by others.

You control this in Settings. You can hide your public profile entirely, hide your buy list, stop sharing likes and activity, and hide individual cards. Cards you mark for trade stay on the trade board even if your profile is hidden, and if you accept a trade offer we show your chosen trade contact to that member so you can arrange it between yourselves.

Anything you post publicly may stay visible to others until you delete it. Private messages and trade notes are visible to the member you sent them to.

PokeGoTo relies on external services to function:

• PriceCharting — public product pages for card prices, history, and population data (we fetch data you request; we do not share your account with them).
• eBay — Browse API for active listings shown in the app, and the eBay Partner Network for the affiliate links we earn commission on.
• Google — optional OAuth sign-in; Google Analytics (optional, only if you accept analytics cookies); and Google AdSense (ads on the site, with Google-managed ad consent where required).
• Apple — optional Sign in with Apple, and delivery of push notifications to iOS devices.
• AI assistant — if you use it, your messages and the page you are viewing are sent to a third-party AI provider (currently Google) to generate a reply.
• PSA (Collectors) — looks up graded card certificates. We send the certificate number you searched for, not your account details.
• Infrastructure providers — we use third-party providers to host the website, store our database, send account emails such as password resets, deliver mobile push notifications, and protect our contact form from bots. The bot check receives your IP address; the others handle only the data needed to run the feature. All of them act on our instructions and may not use your data for their own purposes.
• Performance measurement — our hosting platform measures traffic volumes and page loading speed. This is aggregate, uses no cookies, and is not linked to your account.
• Exchange rates — we fetch public currency rates so prices can be shown in your currency. No personal information is sent.

Where we describe a category rather than a company, we can tell you which providers we currently use — just ask us.

Links to third-party sites (e.g. eBay, PriceCharting) have their own privacy practices. We are not responsible for those sites.

We use essential cookies and similar technologies to keep you signed in and protect the service. We also use Google Analytics cookies to understand how the site is used, but only if you accept them — they stay switched off until you do. You can accept or decline analytics on the cookie banner, and change your choice at any time on our Cookie Policy page. Google AdSense may show ads using separate Google consent messaging; that is independent of the analytics banner above. We do not use other third-party advertising networks. You can sign out to clear your session cookie; local list data in your browser remains until you clear site data or remove items in the app.

We retain account and synced data while your account is active and as needed to provide the service or meet legal obligations. You may request account deletion, or a copy of the data we hold about you, by contacting us. When you ask us to delete your account we deactivate it and sign you out straight away, then permanently remove it within 30 days. Content you posted publicly may remain visible until it is removed with your account.

We use reasonable technical measures to protect your information, but no online service can guarantee absolute security.

PokeGoTo is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us so we can delete it. Use our contact form.

We may revise this Privacy Policy. Continued use after changes means you accept the updated policy. If you do not agree, please stop using PokeGoTo.