Privacy Policy

Catchfolio (“we”, “us”) operates the Catchfolio Service from New Zealand at catchfol.io. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have. Contact: support@catchfol.io.

This policy applies to personal information processed when you visit catchfol.io, create an account, use Catchfolio features, or contact support. It does not cover third-party sites or apps we link to.

We may collect:

• Account data — username, display name, password hash, preferred currency, and plan label associated with your account.
• Social login data — when you sign in with Google or Facebook, the provider account ID and basic profile details they share (such as name and email), used to identify your Catchfolio account.
• Collection content — card photos and camera scans, collection records, binders, marketplace items, sales, pack openings, watchlist entries, notes, 3D renders, and share settings you create.
• Technical data — IP address, user agent, device/browser signals, timestamps, and similar request metadata in server logs needed to operate, debug, and secure the Service.
• Communications — messages you send to support@catchfol.io and related correspondence.

We use personal information to:

• create and authenticate accounts;
• operate collection, scan, binder, pricing, and sharing features;
• identify cards and display catalog or market information you request;
• prevent abuse, spam, fraud, and security incidents;
• improve reliability and troubleshoot issues; and
• respond to support requests and legal obligations.

We do not sell your personal information.

When you use scanning, centering, binder-cover, or 3D-render features, we process images from your camera or gallery to identify cards or build those features. Images may be stored on our servers while needed for your account. We do not sell scanned images. We may use processors solely to run identification and related features. More detail is in the Terms of Service.

Catchfolio uses essential cookies and similar storage technologies required for the Service to function, including:

• session cookies that keep you signed in;
• short-lived cookies used during Google/Facebook OAuth sign-in; and
• local preferences such as theme (light/dark catalogue mode).

We do not currently use third-party advertising cookies or third-party analytics cookies. You can clear cookies and site data in your browser; doing so may sign you out or reset preferences.

Social login is used only to identify your Catchfolio account. Catchfolio does not store Google or Facebook access tokens after sign-in and does not post to either service on your behalf. Those providers process your data under their own privacy policies when you use their login.

Your collection content is private to your account unless you create a public binder or 3D-card share link. Anyone with that link can view the shared material until it expires or you remove it.

We may share personal information with infrastructure providers that host or process data solely to run Catchfolio (for example hosting, storage, or email delivery), under appropriate confidentiality and security expectations. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer (in which case we will take reasonable steps so the recipient continues to protect the information).

Account and collection data are kept while your account exists. Server logs are retained only as long as reasonably needed for security and operations. Temporary public shares may expire automatically.

When you delete your account, we begin removing associated personal data from active systems as soon as practicable (typically within 30 days). Residual copies in backups or disaster-recovery systems may take additional time to rotate out (typically up to about 90 days), except where we must retain limited records for legal, security, or dispute reasons. See the data deletion instructions.

Catchfolio may be hosted or supported using infrastructure in New Zealand and other countries. If you access the Service from elsewhere, your information may be processed outside your home country, including in places with different data protection laws.

We use reasonable technical and organisational measures to protect personal information (including hashed passwords and access controls). No method of transmission or storage is completely secure; please use a strong unique password and protect your devices.

You can update profile details in the app, delete your account from Profile, and clear browser cookies/local storage. Depending on where you live, you may also have rights to request access, correction, deletion, or a copy of personal information we hold about you, or to object to certain processing. To exercise those rights, email support@catchfol.io. We may need to verify your identity before responding.

Catchfolio is not directed at children under 13 (or the higher age required in your country). We do not knowingly collect personal information from children below that age. If you believe a child has created an account, contact us and we will delete it.

We may update this Privacy Policy from time to time. The effective date above will change when we do. For material changes, we will try to give reasonable advance notice where practicable (for example in the Service or by email).

Catchfolio · New Zealand
Privacy questions: support@catchfol.io. Related: Terms of Service · Copyright notice.