Introduction
Obsidian Grid LLC operates PokeMarket (pokemarketcap.com), a Pokémon TCG market data platform. This Privacy Policy describes how we collect, use, and protect user information.Information We Collect
Account information. Accounts are managed by our authentication provider, Clerk. When you create an account we receive your email address and, if you provide it, your name. You can sign up with an email address and password, with Google (on the website), or with Sign in with Apple in the iOS app where it is offered. With Sign in with Apple you can choose to hide your email address, in which case we receive an Apple relay address instead.
Subscription information. Subscription billing is processed by Stripe. We store your Stripe customer ID and subscription status to deliver the service. We never receive or store your credit card details.
Store orders. If you buy from the Community Store, Stripe Checkout collects your shipping name and address. We store them with the order, together with what you bought and the amounts charged, to fulfil and support the order.
Your collection. The content you add to your account: portfolio holdings, binders, wishlist, custom collections, and the cards, sets, and Pokémon you follow. If you import a spreadsheet into your portfolio, the file is processed to read it into holdings.
Usage data. We collect data on pages viewed, search queries, and items you follow to provide and improve the service.
Visitor analytics. When you browse without signing in, we use first-party analytics to understand how visitors find and use PokeMarket: a random visitor identifier stored in your browser's local storage, the pages you view, how you arrived (referring site and campaign parameters), your device type, and your browser's user agent. This data is not linked to your identity and is automatically deleted after 90 days.
Cookies. We use authentication session cookies (required to keep you signed in) and the first-party analytics described above.
Advertising pixels (website only). On the pokemarketcap.com website we use advertising measurement tags from Meta, TikTok, and Google Ads to measure and improve our ads. They set their own cookies and receive the pages you view and conversion events (such as sign-up, checkout started, and purchase). For signed-in visitors they also receive a one-way (SHA-256) hash of your email address and account ID; for website subscriptions, the purchase event is also sent from our server to TikTok. Your browser's tracking protections and each platform's ad settings let you limit this.
PokeMarket iOS app. The PokeMarket iOS app does not load these advertising tags, does not send your activity or purchases to advertising platforms, and does not track you across other companies' apps or websites. It uses the first-party analytics described above, which we do not share with advertisers.
PokeMarket in ChatGPT
PokeMarket offers a ChatGPT plugin that answers questions about the Pokémon card market using PokeMarket data. Using it does not require a PokeMarket account. When ChatGPT calls PokeMarket on your behalf, we receive only the request the plugin needs to answer (for example, a card name, set, grade, or time period) plus an anonymized user or conversation identifier generated by OpenAI.
›What we log: for each request, the tool used, whether it succeeded, the card, set, Pokémon, grade, index, or period it resolved to, the number of results, response time, and a one-way hash of that anonymized identifier (so we can count unique users and conversations without knowing who they are).
›What we do not log: your ChatGPT conversation, your prompts, the text you typed, your name, email, or IP address.
›Rate limiting: to prevent abuse, we briefly process the network address a request comes from to apply usage limits. Addresses that exceed those limits are retained for up to 7 days for abuse prevention, then deleted.
›Why: to operate and rate-limit the plugin, measure which questions it can answer, and improve PokeMarket.
›Who receives it: nobody outside PokeMarket and its hosting providers listed below. We do not sell or share it.
›Retention: plugin request logs are automatically deleted after 13 months.
›Your controls:you can disconnect PokeMarket in ChatGPT at any time. OpenAI's handling of your conversation is governed by OpenAI's privacy policy. Links the plugin returns to pokemarketcap.com carry campaign parameters that identify the visit as coming from ChatGPT; that visit is then covered by the Visitor analytics terms above.
How We Use Your Information
›To provide and maintain the PokeMarket service
›To process subscription payments via Stripe
›To send service-related emails (subscription confirmations, billing notifications, important service updates)
›To improve product features based on aggregated, anonymized usage patterns
›On the website, to measure the performance of our ads with the advertising tags described above (never in the iOS app)
›We do not send you marketing email without your opt-in
Information Sharing
We do not sell, rent, or trade user data. We share information only with the service providers we rely on to operate the platform:
›Stripe — payment processing and store checkout
›Clerk — authentication (with Cloudflare bot protection on sign-up)
›Vercel — application hosting and first-party web analytics
›Neon — database hosting
›Railway — background job processing
›Upstash — caching and rate limiting
›Resend — delivery of account and order emails
›Anthropic — reading spreadsheets you choose to import into your portfolio
›Meta, TikTok, and Google — advertising measurement on the website only (see Advertising pixels above)
We may disclose information when required by law, court order, or government request, or to protect our rights and safety. In the event of a business transfer (acquisition, merger), user data may transfer as part of the transaction.
eBay Listing Data
Card pages show active eBay listings retrieved through eBay's official API, so buyers can see current supply and click through to eBay.
›We keep a listing's details (item ID, title, price, condition, item link) only while eBay keeps confirming it is live, and delete them once it no longer is.
›We never display eBay seller usernames. For data-integrity checks we store them only as salted one-way hashes that cannot be reversed to identify a seller.
›We honor eBay marketplace account-deletion notifications: when eBay tells us an account has closed, we remove stored data tied to it.
›eBay listing data is used only to show listings on PokeMarket. We do not sell, share, or export it.
Data Security
We use industry-standard security measures including HTTPS/TLS encryption, secure authentication via Clerk, and PCI-compliant payment processing via Stripe. No security measure is absolute; you are responsible for keeping your authentication credentials secure.
Your Rights
Correction. You can update your account information at any time via the Account settings.
Deletion. You can delete your account at any time, on the website or in the iOS app: Account → Delete account (in the app, open it from the Menu). Deleting your account removes your login immediately and cancels any active Premium subscription, with no further charges. Within 30 days we delete the personal data tied to your account: portfolio and collections, binders, wishlist, follows, notification settings, and usage history. We keep records of Community Store orders for tax and accounting purposes (typically up to 7 years), with your name and street address removed (an order that hasn't shipped yet keeps its address until it ships). If you used Sign in with Apple, deleting in the iOS app also disconnects PokeMarket from your Apple ID; you can do this yourself under Sign in with Apple in your Apple Account settings.
Subscription cancellation. Cancel any time via
/account/billing. Access continues through the end of the paid period.
Children's Privacy
PokeMarket is not directed at children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it.
International Users
PokeMarket is operated from the United States. Users outside the US should be aware that data is processed in the US under US privacy law.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on the site. Continued use of the service after changes constitutes acceptance.