Privacy Policy

Last updated: 23 October 2026

1. Who we are

PredicTCG is operated by Bruno Severini, a self-employed professional (libero professionista), VAT number IT18743751002, Via Giannutri 10, 04016 Sabaudia (LT), Italy ("PredicTCG", "we", "us"). We are the data controller for the personal data described here.

This policy covers the PredicTCG app for iPhone and Android and the website predictcg.com. You can reach us at contacts@predictcg.com.

2. The data we collect

Your account

• Email address and name.
• Your password, stored only as a secure hash, or the account identifier we receive when you use Sign in with Apple or Sign in with Google.
• A phone number, only if you choose to add one.
• The codes we email you to verify your address.

Your profile

• Display name and, if you add one, a profile photo.
• City and country, if you enter them, and your currency.
• Your preferences, such as chart colour and notification settings.
• Whether your profile is public and whether your collection's values are shown.
• Your badges, your invite code and, if you joined with one, who invited you.

Your collection and activity

• The cards you add, with grade, quantity and, if you enter it, what you paid.
• Your favourites, price targets and the alerts we send you.
• The value history of your collection.
• Links you create to share your collection, people you block and reports you send.

Your scans

• The photos you take of a card (front, back and, when you take them, tilted photos).
• The result: the card recognised, its estimated grade and notes on its condition.

Your purchases

• Whether you have PRO, your plan, renewal and expiry dates, and the store's transaction identifiers.
• Payments are handled by Apple or Google. We never receive your card or bank details.

Your device

• Your device's push-notification token and the app version.
• Your IP address and the country it points to. We use the country only to choose your currency until you pick one yourself.
• Technical logs of requests to our servers, used for security and to fix problems.

Messages

• What you write to us, for example by email.

When you visit predictcg.com

• Cloudflare delivers and protects the site. Like any web server, it processes your IP address and browser details to send you the pages and block attacks.
• We count visits with Cloudflare Web Analytics, without cookies and without identifying you: we only see totals, such as pages viewed and visitors' countries.
• The site has no forms and no advertising or social media trackers. Our Instagram, Facebook and Discord links are plain links: those platforms only receive your data if you open them.

We don't show advertising, we don't track you across other apps or websites, and the app contains no analytics or advertising tools.

3. Why we use your data

To improve PredicTCG we only use aggregated figures that don't identify you, such as how many cards are scanned each day.

4. Who can see your data

Other collectors

When your profile is public, other users can see your display name, profile photo, badges, PRO status and the cards in your collection. Your collection's values are shown only if you turn them on. Your profile stays private until you choose to make it public: we ask you when you add your first card, and you can change it at any time in the app. A private profile is hidden from other users, and its collection can't be shared by link.

Our service providers

These companies process data for us, only on our instructions and under contract:

Apple and Google also process your payments as independent controllers, under their own privacy policies. We may share data with public authorities when the law requires it. We never sell your personal data.

Our social media pages

We have pages on Instagram, Facebook and Discord. When you visit or follow them, those platforms process your data under their own privacy policies. For our Instagram and Facebook pages, Meta and we are jointly responsible for the page statistics that Meta gives us.

5. Transfers outside the European Union

Some of our providers are in the United States. These transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, for certified companies, or on the Commission's Standard Contractual Clauses.

6. How long we keep your data

• Account, profile and collection: as long as your account is open.
• Scan photos: deleted automatically within two days. We keep the result of the scan.
• Verification codes: deleted once used or expired.
• When you delete your account: we delete at once your collection, favourites, price targets and alerts, value history, the cards you viewed, device tokens, profile photo, name, phone number, city and country, notification settings, share links and blocks, and your profile is no longer visible. We keep your email address, your Google or Apple sign-in link, the record of your scans and any reports made by or about you for up to 12 months, only to prevent abuse of the free plan and to keep the community safe, then we delete them.
• Purchase records: kept without your name or email for as long as accounting and tax rules require.
• Backups: copies of our database are kept for up to 30 days, then deleted.
• Website visits: we only keep totals that don't identify you.
• Technical logs: for a limited time, for security and troubleshooting. Copies held by our service providers follow their own retention rules.

7. Your rights

Under the GDPR you can ask to access your data, correct it, delete it, restrict its use, receive it in a portable format, and object to uses based on our legitimate interests. When we rely on your consent, you can withdraw it at any time.

You can do much of this in the app: edit your profile, make it private, and delete your account in Profile › Delete account. For anything else, write to contacts@predictcg.com. We answer within one month.

You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority of the country where you live.

8. Children

PredicTCG is not meant for children under 13. To use it you must also be old enough to agree to the use of your data in your country (for example 14 in Italy and 16 in Germany); below that age a parent or guardian must agree for you. If you believe a child has given us personal data, contact us and we will delete it.

9. Security

We protect your data with encrypted connections, hashed passwords and access limited to the people who need it. No system is perfectly secure: if a breach affects your data, we will inform you and the authorities as the law requires.

10. Changes to this policy

When we change this policy we update the date at the top. If the changes are important, we tell you in the app or by email before they apply.

11. Contact