CollectlyBack to site

Privacy Policy

Last updated · 16 July 2026

1. Who we are

Collectly is a UK-operated card collection service. This policy explains what personal data we hold and why, in line with UK GDPR.

2. What we collect

  • Account data: your email address and password (stored hashed).
  • Collection data: the cards, prices, costs, sales and wishlist entries you add.
  • Scan photos: images you submit for identification are processed to identify the card and are not used to build advertising profiles.
  • Billing status: your plan and subscription state. Card details go directly to Stripe; we never see them.
  • Usage analytics: privacy-friendly, cookie-less page analytics (Vercel Analytics). No cross-site tracking, no advertising cookies. The only cookies we set are the ones that keep you signed in.

3. Where it lives and who processes it

  • Supabase (database and authentication), hosted in London (eu-west-2).
  • Vercel (application hosting and analytics).
  • Stripe (payments and subscription management).
  • AI providers, including Anthropic: scan photos and card text are sent for automated identification. They are used to answer your scan, not for training on your behalf.

4. Public profiles

Every account has a public collector profile at collectly.app/u/yourusername showing your username, display name, bio, join month, collection counts and your highest-value cards. Your collection’s monetary value and individual card prices are private by defaultand appear only if you switch on “Show collection value” in Settings. You can also exclude your page from search engines in Settings. Anything you choose to publish there is visible to anyone with the link.

5. Why we process it

To run your account and vault (contract), to meter and bill plans (contract), to keep the service secure and improve it (legitimate interest), and to meet legal obligations such as tax records on payments.

6. Retention and deletion

Your data is kept while your account is open. Close your account and your collection data is deleted from the live database; short-lived backups roll off automatically. Payment records are retained as required by UK tax law.

7. Your rights

You can request access to, correction of, export of, or deletion of your personal data at any time, and you can complain to the ICO (ico.org.uk) if you think we’ve handled your data badly. Contact us first and we’ll usually fix it faster.

8. Contact

support@collectly.app