Privacy Policy

This is a plain-English summary of what Verdict does with your data. If something here isn’t clear, email support@verdict.cards.

Who We Are

Verdict is operated by Collins and Company Enterprises, LLC, a Mississippi limited liability company. For purposes of GDPR and similar laws, we are the “data controller” for personal information processed through this site.

Mailing address:
Collins and Company Enterprises, LLC
102 Indian Creek Blvd
Flowood, MS 39232
United States

Privacy contact: support@verdict.cards

What We Collect

• Searches you run. The normalized query (lowercase, punctuation stripped) is used as a cache key so repeat searches are faster and can be enriched over time.
• Collection and Watchlist entries you save — the card query, purchase price, target price, notes, and timestamps. Stored in Supabase.
• Photos you upload to the Grade Tool or “Snap a photo” identification. These are sent to Anthropic’s Claude Vision API for processing and not stored by us after the response is returned.
• Basic technical logs — browser user-agent, errors, and request/response timing. Used for debugging; not sold.

What We Don’t Collect

• We don’t require an account today. If/when we add accounts, email and auth info will be added here.
• We don’t use tracking cookies, pixels, or third-party analytics.
• We don’t collect payment information — there’s nothing to pay for yet.

Who Sees Your Data

To run the product, your data is passed through a handful of third-party services. None of them receive data beyond what’s needed to deliver their function:

• Supabase — stores sales history, your collection, watchlist, and player-collection data. Hosted in the US.
• SerpAPI / eBay — search queries go to eBay’s public marketplace via SerpAPI to pull sold listings. They see the card query text only. Verdict is not affiliated with, endorsed by, or sponsored by eBay Inc. — we use their public listings data the same way a price aggregator uses a store’s catalog.
• Anthropic (Claude) — photos and text prompts sent to Claude for AI identification, grading, and bounds detection. Anthropic’s data handling is covered by their enterprise API terms — photos aren’t used to train models.
• Vercel — hosts the site and processes every request.

We don’t sell or rent your data to anyone. Not today, not later. If that ever changes, we will update this policy with advance notice and an opt-out mechanism before any sharing begins.

eBay Data: What, Why, and How

Verdict’s prices come from publicly visible sold-listing data from eBay. We don’t access anyone’s eBay account, order history, or private messages. We don’t store individual buyer or seller usernames. We cache the listing titles, sold prices, sale dates, shipping costs, and public listing URLs so long-term trend analysis is possible after eBay removes a sale from its rolling 90-day window.

How Long Data is Kept

• Sales history: retained indefinitely to power long-term trend charts.
• Your collection/watchlist entries: until you delete them.
• Photos you upload: processed in memory and discarded.
• Search logs: retained up to 30 days for debugging, then rotated out.

Your Rights

Regardless of where you live, Verdict provides the following rights. We apply the most-user-friendly standard to every visitor, not just those in jurisdictions that legally require it:

• Right to know what we store — see the “What We Collect” section above. If you want a specific data export, email us.
• Right to access — your collection and watchlist entries are always visible and exportable in-app.
• Right to delete — remove any collection or watchlist card in-app (permanent and immediate), or email us to wipe everything associated with you within 30 days.
• Right to correct — editable data is editable in-app. For anything else, email us and we’ll fix it.
• Right to opt out of sale — moot, because we do not sell your data. If we ever begin sharing data for commercial purposes, you will have a clear opt-out before it starts.
• Right to non-discrimination — exercising any of these rights will not result in degraded service, price changes, or reduced features.

California, Virginia, Colorado, Connecticut, Utah, EU/UK residents — you have the same rights above under your local privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, GDPR). Mississippi does not currently have a comprehensive consumer privacy law, but Mississippi residents enjoy the same protections by our choice.

Data Breach Notification

If we discover a security incident that affects personal data, we will notify affected users by email (if we have an address) or by a prominent in-app notice within 72 hours of confirmation, as required by applicable law. The notice will describe what happened, what data was involved, and what steps you can take.

Children

Verdict isn’t directed at children under 13 and we don’t knowingly collect data from them. If you believe a child has used the service, let us know and we’ll delete their data.

Changes

If this policy changes materially, we’ll update the “Last updated” date at the top and surface a notice in the app. For small clarifications, we’ll just update the page.

Contact

Questions, data access, or deletion requests: support@verdict.cards, or write to us at the mailing address above.