Privacy Policy
The short version. MarketDex is built privacy-first. We don't run analytics, we don't sell your data, and almost everything the app saves lives only on your phone. The one external account we touch is your Google sign-in, and that's only used to identify you across devices when you sign back in.
1. What we collect
From your Google account (only after you tap "Sign in with Google")
- Your Google account ID (used as your stable username inside the app)
- Your name, email address, and profile photo URL
We do not request access to your contacts, calendar, drive, or any other Google service. We never see or store your Google password — Google handles the sign-in directly.
Apple Sign-In
Apple Sign-In is planned for the iOS release. When available it will collect only your Apple ID identifier and, if you allow it, your name and a relay email address.
On your device only
- Your transaction log (buys + sales you log in Vendor mode)
- Your saved vendor lots and set-pricing snapshots
- Your scan history counter (how many cards you've scanned)
- Your recent searches
- Your theme, language, and currency preferences
All of the above is stored locally in your phone's app storage. None of it is uploaded to MarketDex servers — we don't operate any user-data servers.
What we DO NOT collect
- No analytics events, screen views, or session tracking
- No advertising IDs or device fingerprints
- No crash reports (no Sentry, Crashlytics, etc.)
- No location data
- No microphone access
- No background data collection of any kind
2. Permissions we request
- Camera — only when you tap a scan / AI-grade button. Frames are sent to our scan worker for card recognition and are discarded right after the result is returned. Nothing is stored on a server.
- Network — to look up card data, prices, and sold listings from third-party APIs (see section 4).
3. How we use what we collect
- Sign you in and keep you signed in across app launches.
- Key your stats and saved data to your account so the right vendor lots, transactions, and scan count come back when you sign in on another device.
- Show your name + avatar in the Profile screen. That's it.
4. Third-party services we call
MarketDex looks up card data, prices, and sold listings by calling small proxies we run on Cloudflare Workers. Those proxies in turn talk to:
- Scrydex — card catalog, prices, expansion data.
- eBay (sold listings) — last-5 sold prices shown on card detail pages.
- OCR + Vision — image-to-card identification when you use the camera scanner.
- AI grading — when you use AI grade, the photos of the card you take are sent to the grading worker for analysis, then discarded.
Queries to these services include the card name / number / set you're looking up — not anything about you personally. The Cloudflare workers don't log who asked. We use proxies specifically so the upstream APIs never see your IP address directly.
5. Sharing & selling
We do not sell your data. We do not share your data with advertisers. We do not share your data with anyone, period — because there's almost nothing to share. Your transactions, lots, and stats sit on your phone.
6. Deleting your account or your data
Disconnect Google (from inside the app)
Open Profile → Danger Zone → "Disconnect Google". This revokes our access to your Google account and clears your cached session. Your on-device data (stats, vendor lots) stays so signing back in with the same account brings it all back.
Delete everything (wipe the device data too)
Uninstall MarketDex from your phone. App storage goes with the app — every transaction, lot, stat, and preference is erased. There is nothing to delete server-side because we don't store anything server-side.
Request account deletion by email
Prefer to submit a request instead? Use our account deletion form.
Revoke Google access from outside the app
Go to myaccount.google.com/permissions and remove MarketDex from the list of apps with access. This is equivalent to "Disconnect Google" above.
7. Children's privacy
MarketDex isn't directed at children under 13. We don't knowingly collect data from anyone under 13. Google's and Apple's sign-in already gate account age on their side.
8. Changes to this policy
If we wire in anything that affects what's collected (an analytics SDK, a crash reporter, a real backend, anything), we'll update the date at the top and surface a note in the app the next time you open Profile.
9. Contact
Questions or requests? Email support@marketdex.app.