PRIVACY POLICY

Last updated 7 September 2026

  • Account: email, name, username, date of birth. Optionally location (country, state, ZIP) and social handles.
  • Your collection: the cards you catalogue and photos you upload.
  • Purchases: subscription tier and billing status. Card numbers never reach our servers — Stripe and Apple handle them.
  • Diagnostics: crash and error reports.

Used only to confirm you’re old enough to use the service. Accounts for children under 13 are blocked. Never used for advertising or profiling.

  • Anthropic — for AI card scanning and grade estimation, the card photo and extracted text are sent to Anthropic’s API. Under their API terms, this content is not used to train their models.
  • Supabase — hosting, database, storage, authentication.
  • Stripe and Apple — subscription payments.
  • PriceCharting — card metadata and market values. No personal information sent.
  • eBay — listing search and affiliate links. No personal information shared.
  • Sentry — error reporting. Session replay is disabled on mobile and masked on the web, so your photos and portfolio are never captured.

We don’t sell your personal information, track you across other companies’ apps or websites, or run advertising or analytics trackers.

Manifests are private by default. Make one public and anyone with the link can see its cards and photos. There’s no directory or feed — it’s reachable only by a link you share. You can make it private again at any time.

We keep your data while your account exists. Delete your account at any time and your manifests, cards and photos go with it; backups are purged on a rolling schedule. We keep some records where the law requires, such as transaction records for tax.

You can access, correct, export or delete your personal information. Depending on where you live you may have further rights, including under the CCPA (California) and the My Health My Data Act (Washington). Email us and we’ll act on it.

Row-level access rules mean only your account can reach your data. On mobile, your session lives in the device’s secure keychain, not ordinary app storage.

JAH SERVICES LLC · support@manifest.cards