Privacy Notice

Depending on how you use CaseLink, we collect:

• Access waitlist: your email, and optionally your name, role (dealer/collector), business or dealer name, Instagram handle, and a short note, plus your consent to be contacted. We also store a hashed form of your email and IP address to prevent spam and abuse.
• Account: your email and password, or your Google sign-in, plus a display name (and an optional first and last name).
• Collector profile: display name, optional phone number and preferred contact method, and the cards you save or make offers on.
• Collector Vault: the cards you add to your private vault — card details, optional photos (stored privately, visible only to your account), and the purchase price, estimated value, and currency you enter. For matching raw TCG cards we also attach an automatic market-value estimate (see “Who we share data with”).
• Dealer workspace: your business display name, optional phone, website and social handles, your preferences (language, currency, time zone), and the data you create — inventory, cards, shows, sales, trades, offers, holds, notes, label data, and staff invitations (which include the invited person’s name and email).
• Offers and activity: offer amounts and the collector name and contact details submitted or recorded for a deal, plus a history of that offer activity.
• Website and product usage: basic analytics about how our website and product are used and, if you accept marketing cookies, website events used to measure Meta campaigns (see “Cookies and analytics” below).

• To provide and operate CaseLink and your account (to perform our agreement with you).
• To run the access waitlist and contact you about approved access (based on your consent).
• To keep CaseLink secure and prevent abuse (our legitimate interest).
• To understand and improve how the website and product are used (your consent or our legitimate interest).
• To measure marketing campaigns with Meta Pixel where you grant marketing cookie consent.
• To keep records of completed sales and trades for a dealer’s legal and tax purposes (legal obligation / legitimate interest).

Where we rely on your consent, you can withdraw it at any time.

We do not sell your personal information. We share it only with service providers that process it for us, and with optional marketing measurement providers when you consent:

• Cloud hosting, database, authentication, and storage providers that run the CaseLink app and website.
• An email provider that delivers access and account emails.
• An AI vision provider (Anthropic’s Claude, or Google’s Gemini depending on our configuration) that reads card details from a photo when you use the “identify a card from a photo” feature.
• Push notification providers — Expo’s push service and the platform gateways (Apple Push Notification service and Firebase Cloud Messaging) — that deliver app notifications if you opt in.
• Map providers that render the show-discovery maps — Esri/ArcGIS tiles on the website, Apple Maps on iOS, and Google Maps on Android. They receive the map area you view and your IP address. We do not send them your precise location.
• Analytics and performance providers (for example Google Tag Manager/Analytics and PostHog when Analytics cookies are accepted, plus cookieless Ahrefs and Vercel measurement) that measure how the website and product are used and how they perform.
• Meta Pixel, if you accept Marketing cookies, to measure and improve Meta advertising campaigns.
• Google or Apple, if you choose to sign in with your Google or Apple account.
• Card market-data providers — to attach market values and reference prices, our servers send card identities (the game, card name, set, and number — never your name, account, or contact details) to pricing sources such as pokemontcg.io, Scryfall, YGOPRODeck, and eBay’s Browse API.

We may also disclose data if the law requires it. Separately, when you ask a dealer to see a card or send them an offer, that dealer can see your display name and any contact details you choose to share, so they can follow up with you. Saving a card is private — it does not share your identity with the dealer.

Depending on where you live, you have rights over your personal data. If you are in the EEA or UK, these include access, correction, deletion, restriction, portability, and objection, plus the right to withdraw consent and to lodge a complaint with your data protection authority. If you are in California or another US state with a privacy law, see “California & US state privacy rights” below.

To exercise any right, email hello@getcaselink.com or delete your account in the app.

We do not sell your personal information for money. If you accept Marketing cookies, Meta Pixel may receive website event data for campaign measurement and optimization, which some US state privacy laws may treat as “sharing” for cross-context behavioral advertising. You can opt out at any time by rejecting Marketing cookies in Cookie settings or emailing us. We do not collect sensitive personal information, so there is no right to limit its use.

The categories of personal information we collect, in the terms used by California law, are:

• Identifiers — such as your name, email address, phone number, and account and sign-in details.
• Customer records — business or dealer name, social handles, and contact details you provide.
• Commercial information — your inventory, offers, holds, sales, trades, and saved or watched cards.
• Internet or network activity — limited, consent-based website and product analytics, plus Meta website event data if marketing consent is granted.

We collect this from you directly and from your use of CaseLink, use it for the purposes described above, and disclose it only to the providers listed under “Who we share data with” for those business purposes.

If you are a California resident — or in another US state with a privacy law — you have the right to know, access, delete, and correct your personal information, and to opt out of any sale or sharing. For website marketing sharing, rejecting Marketing cookies is the self-serve opt-out. We also honor the Global Privacy Control (GPC) browser signal: when your browser sends GPC and you have made no explicit cookie choice, analytics and marketing are treated as declined automatically. We will not discriminate against you for exercising these rights. To make a request, email hello@getcaselink.com or delete your account in the app; you may use an authorized agent, and we respond within the timeframes required by law (generally within 45 days).