Privacy Policy

Who we are

TopLoad is operated by Ahmed Abdalla (“we”). You can reach us at support@topload.com.

What we collect

• Account details. When you create an account, our sign-in provider (Clerk) collects your email address, your name if you give one, and what it needs to keep you signed in. On our own servers we keep only an account ID, a username (taken from your username or the first part of your email) and an optional display name.
• Your collection. The cards, slabs and sealed products you add, with quantity, condition, grading company, grade, cert number, what you paid, purchase date, any custom value, notes, and the collections you create. Price history is stored for each item.
• Basic technical data. Our hosting provider (Vercel) keeps standard server logs such as IP address, time and the page or endpoint requested, for security and to keep the service running.
• On your device. The app stores a sign-in token in your iPhone’s secure storage and a few preferences (such as your last collection and appearance setting). Nothing here is used for tracking.

• The camera. If you use the scanner, each camera picture is read on your phone using Apple’s on-device text recognition and then discarded. We never receive the picture. Only the card number and name it read (for example “199/165”) are sent to our servers to find the card. If you correct a wrong match, we store what was read and which card you chose, without your name, to improve matching for everyone.
• Friends and sharing. You choose your username, and it can be found by other users who type it to send a friend request. Once you approve a friend, they can see your binders, the cards in them and what they are worth. What you paid, purchase dates and your notes are never shown to anyone else. You can set any binder to “Only me”, or unfriend someone, at any time.

We do not collect your location, contacts, photo library, or advertising identifier, and the app has no analytics.

How we use it

• To run the app: show your collection, price your cards, and work out totals and profit or loss.
• To keep the service secure, prevent abuse and fix problems.
• To email you only about your account (for example sign-in verification). We do not send marketing email.

Who handles your data

These companies process data for us. We give them only what they need.

• Clerk: sign-in and account management.
• Neon: the database that stores your collection.
• Vercel: hosting for the website and the app’s servers.
• Apple: distributes the app through the App Store and TestFlight under its own privacy terms.

Card prices come from TCGplayer (through TCGCSV) and PokemonPriceTracker, which supplies eBay sales data. We send them card identifiers, never your personal details. Links to eBay open eBay’s own site, which has its own privacy policy. Providers may be located outside your country, including the United States.

Sharing

We do not sell or rent your data. We share it only with the providers above, when the law requires it, or to protect the service and its users. Collections are private unless you choose to share them. A collection you set to “Link” can be seen by anyone who has the link, so only send it to people you trust.

How long we keep it

We keep your data while your account exists. When you delete your account, your collection and account records are removed from our database straight away and your sign-in account is deleted. Copies may remain in providers’ routine backups for a short time before they expire.

Your choices and rights

• Delete: in the app, go to Settings → Delete account, or follow these steps.
• Export: Settings → Export collection gives you a spreadsheet of everything you added.
• Access, correct, object or restrict: email us. Depending on where you live (for example the EU, UK or California) you have legal rights over your personal data, and we will honour them. We will not treat you differently for using them.
• Complaints: you may also contact your local data protection authority.

Children

TopLoad is not for children under 13. We do not knowingly collect personal data from them. If you believe a child under 13 has an account, email us and we will delete it.

Cookies

The website does not use cookies for tracking or advertising. See the Cookie Policy.

Security

Data travels over encrypted connections and is stored with providers that encrypt it at rest. No system is perfectly secure, so we cannot guarantee absolute security.

Changes

If we change this policy in a meaningful way we will update the date above and, for significant changes, tell you in the app.