HobiiDex

Privacy Policy

Last updated July 18, 2026

The short version

We collect what the service needs to work — your email, your collection data, and usage records — and nothing more. We don’t sell personal data, we don’t run ads, and we don’t use third-party analytics trackers. Card payments are handled entirely by Shopify and never touch our servers. Photos you scan are processed to identify cards and are not kept.

What we collect

Account: your email address and name, via our sign-in provider (Neon Auth), plus a session cookie that keeps you signed in.

Collection data: the cards, quantities, conditions, portfolios, prices paid, and related details you add — this is the product, and it’s yours.

Scan photos: when you use the camera scanner, your photo is sent to an AI vision provider (one of Google, Anthropic, OpenAI, or xAI, depending on configuration) to identify the cards in it. We do not store your photos — we keep only a usage record (when a scan happened, how many cards were detected, and processing metadata).

Purchases: if you subscribe to HobiiDex Vision or buy top-ups, Shopify processes the payment and sends us order information (your email, the items, and order identifiers) so we can activate what you bought. Your card number never reaches us.

Server logs: standard technical logs (requests, errors) that help keep the service running.

How we use it

To run the service: sign you in, store and display your collection, process scans, grant and meter subscription credits, show you your own usage history, and provide support. Aggregate, non-identifying usage and cost figures are visible to the service administrator to operate the service.

Who we share it with

Only the infrastructure the service runs on, each receiving the minimum needed: our hosting and database providers (Vercel, Neon), the AI vision providers listed above (your scan photos, transiently), and Shopify (payments — flowing the other direction: they tell us about your purchase). We don’t sell or rent personal data to anyone, and we don’t share it for advertising.

Cookies

One kind: the session cookie that keeps you signed in. No advertising or cross-site tracking cookies.

Retention and deletion

Your account and collection data stay as long as your account exists. If you want your account and its data deleted, contact us (below) and we’ll remove it; purchase records may be retained where required for accounting or legal reasons.

Children

HobiiDex isn’t directed at children under 13, and we don’t knowingly collect their data.

Changes

If this policy changes materially, we’ll update this page and its “last updated” date.

Contact

Privacy questions or deletion requests: reach us through the Hobii House store — the contact email on your purchase receipt reaches the same people who run HobiiDex.