Privacy policy

When creating an account: your email address, a display name if you provide one, and a password that is never stored in clear text (only a salted cryptographic hash is kept).

When running an analysis: the front and back images you upload. They are sent to the vision model provider to produce the analysis, then kept only if you choose to save the card to your collection.

If you take the photos with the camera inside the app: camera frames are analysed on your device, and nothing is sent until you tap “Analyse card”.

When you buy: payment is collected by Stripe, and the sale is made to you through Link, its payment service, which acts as the merchant of record for the transaction and processes your payment data under its own privacy policy. GradeMate never sees or stores your card numbers; it only receives the payment confirmation and the product purchased.

When you write to us with the contact form: your name, email, subject and message, and your plan if you are a subscriber, so that Pro and Shop subscribers are handled first. The message is forwarded to us by email, by Resend.

When you exercise your right of withdrawal: your name, email, the purchase concerned, any details you give, and the date and time the request was received, to handle it and send you its acknowledgment.

If you subscribe (Pro, or Shop when the Pricing page offers it), GradeMate also keeps your plan, the status of the subscription and its renewal or end date, with the customer and subscription identifiers assigned by Stripe: this is what opens your plan's features and lets you manage the subscription.

Each analysis you run: its date and time, the grading company chosen, the model provider used and whether the photos could be graded — without the images. This record counts your free trial analysis and the fair-use limit of your plan (see the terms of use).

Audience measurement: cookieless traffic statistics (Vercel Web Analytics) and, only if you accept it, Google Analytics.

Technically: application error logs, with no advertising profiling and no resale to third parties.

If you ask to reset your password: a single-use link, valid for one hour, of which only a hash is stored — never the link itself.

To limit abuse of login and password-reset requests: a keyed hash (HMAC) of your IP address or email address, never the address itself, with the time of the request.

Your email preferences: price alerts on or off; for reminders and tips, your consent, with where and when you gave or withdrew it — our record that it was given.

Emails sent to you: your email address and the content of each message are passed to Resend, which delivers them. Reminders and price-alert digests are first queued in our database, with the cards they mention, the prices quoted and the delivery status.

The grade received: if you enter the grade a card received, it is stored with the company that awarded it and the date you entered it, together with a record of any credit it earned.

Public pages: if you share a card, a random link identifier is created. The public page shows the photo of the front, the card's identity, the estimated grade, the company targeted and the analysis date, plus the sub-grades if you choose; never your email address, your name or any price.

Price records: to follow the value of collections, GradeMate records each day the public price of the catalogue cards saved in collections (catalogue identifier, price, date). These records contain nothing about you.

In-app alerts: when a card's price moves sharply, or grading it becomes worth it by our estimate, an alert is stored for your account until you have seen it.

Your data is processed to perform the service you request (GDPR article 6.1.b): creating and securing your account, producing analyses, storing your collection.

Counting your analyses (the free trial analysis, your plan's fair-use limit) is part of performing that service (article 6.1.b).

Handling a withdrawal request and its acknowledgment meets a legal obligation (GDPR article 6.1.c; article L221-21 of the French Consumer Code); replying to contact messages relies on our legitimate interest in answering you (article 6.1.f).

Audience measurement with Google Analytics relies on your consent (GDPR article 6.1.a), collected by the banner shown on your first visit and changeable at any time.

Security and service emails (password reset, password change notice, welcome email) are part of the service (article 6.1.b). They carry no promotion and are sent whatever your preferences.

Price alerts are sent only if you switch them on in Settings (article 6.1.b); every alert email has a link to switch them off in one click.

Reminders and tips (for example about a detailed report still locked in your collection) are sent only with your consent (article 6.1.a), given through an unticked box at signup, in Settings or on the dashboard banner. No such email is sent without that consent, customers included. You can withdraw it at any time, in one click from any of these emails or in Settings.

Limiting abusive requests (the hashes above) relies on our legitimate interest in keeping accounts secure (article 6.1.f).

The figures published on the Grade accuracy page rely on our legitimate interest in measuring and publishing how reliable our estimates are (article 6.1.f). Only statistics per grading company are published, from 30 results upwards; no card, grade or account can be identified from them.

Public card pages are published at your request (article 6.1.b) and stay public until you stop sharing.

No data is used for advertising. No data is sold.

Application hosting: Vercel. Database: Neon. Image storage: Vercel Blob. Analysis models: OpenAI and, as a fallback, Anthropic. Payments: Stripe (sold through Link, the merchant of record for the transaction). Audience measurement: Vercel Web Analytics and, only with your consent, Google Analytics (Google Ireland Limited).

Images sent to model providers are sent solely to produce your analysis.

If you ask for a graded-value estimate from public sales (beta), the Exa search engine runs a web search whose results are read by OpenAI — or, if they do not respond, Anthropic runs that search — from the card's identity alone (name, set, number, printing language and grading company), with no personal data; the result is kept for 7 days in our database, shared by every account that estimates the same card, and each request counts towards a daily limit per account.

Email delivery: Resend. According to its documentation, Resend stores account data in the United States whatever the region emails are sent from, so the addresses and messages it handles are transferred there. Its documentation gives a 30-day retention period for email data.

Resend is operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States. The transfer to the United States is covered by the EU–US Data Privacy Framework and its UK Extension, in which Plus Five Five, Inc. participates, and by the standard contractual clauses included in Resend's data processing agreement.

Reports and the submission planner may contain links to eBay and Amazon search pages. When GradeMate's affiliate identifiers are active, these links carry a campaign identifier (eBay Partner Network) or an associate tag (Amazon Associates); eBay links also carry a number showing where on GradeMate the link was placed. They are then marked “Affiliate links” where they appear.

The eBay link searches for the card itself: its name, set and number, the grading company and, in reports, the estimated grade. Apart from that search, GradeMate passes no personal data to eBay or Amazon through these links: not your name, not your email address, not any identifier of your account.

If you click one, eBay or Amazon may record the click and set their own cookies, under their own privacy policies; from these programmes GradeMate receives only commission reports, which do not identify the buyer. In reports, the click is counted as an anonymous event (link type and placement, no personal data) by the cookieless audience measurement described above.

Analysis images that are not saved are not retained after the request is processed.

Saved cards and their images are kept for as long as you keep them in your collection.

The record of each analysis (date, company, provider, outcome) is kept for as long as your account exists, and deleted with it.

Deleting your account permanently erases your profile, your collection and your images.

Password-reset links expire after one hour; their hash is deleted 7 days after being used or expiring.

The hashes used to limit abuse are kept for 24 hours, then deleted at the next daily purge.

Queued reminders and alert digests are deleted from our database 90 days after being queued.

In-app alerts are deleted 90 days after you have seen them, or with the card or your account.

Daily price records are kept for 400 days, to follow prices over a year.

The grade received is kept with the card and deleted with it. The record of a credit earned for a grade is kept after the card is deleted, with no link to the card, so that the same analysis cannot earn a second credit; it is deleted with your account.

A public page stops working as soon as you stop sharing or delete the card; copies held by the content delivery network expire within minutes, and link previews already shown on other services are beyond our control.

Your email preferences and the record of your consent are kept for as long as your account exists.

Messages sent with the contact form and withdrawal requests are kept for as long as needed to handle them, then as proof that they were handled, within the applicable limitation periods.

You have the right to access, rectify, erase, restrict, object to and port your data.

Account deletion is available directly in the app, under Settings. For any other request, write to contact@fleeceai.agency.

To stop price alerts or reminders: the one-click unsubscribe link at the bottom of each of these emails, or Settings › Emails and security. Security emails cannot be switched off while the account exists, because they protect it.

To sign out of all your devices at once: Settings › Emails and security › Sign out everywhere.

You may lodge a complaint with your national data protection authority if you believe your rights are not respected.

GradeMate sets a session cookie strictly necessary for authentication — set at login, removed at logout — and a cookie that remembers the site language (gm_locale). Neither is used for advertising tracking.

Google Analytics sets its own cookies (_ga and _ga_…) only if you accept it in the consent banner. Declining has no effect on how the site works. Your choice is kept in your browser (gm-consent) for six months, then asked again; you can change it at any time with the “Cookies” link at the bottom of every page — withdrawing consent deletes the Google Analytics cookies.

Vercel's audience measurement is cookieless and cannot recognise a visitor from one day to the next. No advertising cookies are set.

When you open a password-reset link, a temporary cookie (gm_reset) holds it for one hour, only for the password pages; it is deleted as soon as the password is changed.

When you sign in, a cookie (gm_device) remembers for 30 days that this browser has already signed in to your account. It is sent only when you sign in and holds no personal data in clear. Its sole purpose is security: someone trying passwords on your address cannot lock you out of a browser you already use.

Some settings are kept only in your browser's storage, not in your account: the “Sending from” and “Return address” choices of the grading verdict and the submission planner (gm-value-origin: a country or zone, never an address), the fact that the camera explanation has already been shown (gm-camera-primed), whether the report-opening sound is muted (gm-pack-sound) and the number of free centring measurements used today (gm-centering-quota). Two items are kept only in the open tab (session storage) and disappear when it is closed: a plan or credit pack chosen before signing in, until you are signed in and taken to payment (gm-checkout-intent); and a locked report that is on screen when you go to payment, so that it is still there when you come back — its detailed part is encrypted, readable only by GradeMate's server, and it is dropped after 24 hours (gm-pending-report). None of them is used for advertising tracking.