Introduction
Obsidian Grid LLC operates PokeMarket (pokemarketcap.com), a Pokémon TCG market data platform. This Privacy Policy describes how we collect, use, and protect user information.Information We Collect
Account information. When you sign in via Google through our authentication provider (Clerk), we receive your email address and name.
Subscription information. Subscription billing is processed by Stripe. We store your Stripe customer ID and subscription status to deliver the service. We never receive or store your credit card details.
Usage data. We collect data on pages viewed, search queries, and watchlist items to provide and improve the service.
Visitor analytics. When you browse without signing in, we use first-party analytics to understand how visitors find and use PokeMarket: a random visitor identifier stored in your browser's local storage, the pages you view, how you arrived (referring site and campaign parameters), your device type, and your browser's user agent. This data is not linked to your identity and is automatically deleted after 90 days.
Cookies. We use authentication session cookies (required to keep you signed in). We do not use third-party tracking pixels or advertising cookies.
PokeMarket in ChatGPT
PokeMarket offers a ChatGPT plugin that answers questions about the Pokémon card market using PokeMarket data. Using it does not require a PokeMarket account. When ChatGPT calls PokeMarket on your behalf, we receive only the request the plugin needs to answer (for example, a card name, set, grade, or time period) plus an anonymized user or conversation identifier generated by OpenAI.
›What we log: for each request, the tool used, whether it succeeded, the card, set, Pokémon, grade, index, or period it resolved to, the number of results, response time, and a one-way hash of that anonymized identifier (so we can count unique users and conversations without knowing who they are).
›What we do not log: your ChatGPT conversation, your prompts, the text you typed, your name, email, or IP address.
›Rate limiting: to prevent abuse, we briefly process the network address a request comes from to apply usage limits. Addresses that exceed those limits are retained for up to 7 days for abuse prevention, then deleted.
›Why: to operate and rate-limit the plugin, measure which questions it can answer, and improve PokeMarket.
›Who receives it: nobody outside PokeMarket and its hosting providers listed below. We do not sell or share it.
›Retention: plugin request logs are automatically deleted after 13 months.
›Your controls:you can disconnect PokeMarket in ChatGPT at any time. OpenAI's handling of your conversation is governed by OpenAI's privacy policy. Links the plugin returns to pokemarketcap.com carry campaign parameters that identify the visit as coming from ChatGPT; that visit is then covered by the Visitor analytics terms above.
How We Use Your Information
›To provide and maintain the PokeMarket service
›To process subscription payments via Stripe
›To send service-related emails (subscription confirmations, billing notifications, important service updates)
›To improve product features based on aggregated, anonymized usage patterns
›We do not use your information for advertising or marketing without explicit opt-in
Information Sharing
We do not sell, rent, or trade user data. We share information only with the service providers we rely on to operate the platform:
›Stripe — payment processing
›Clerk — authentication
›Vercel — application hosting
›Neon — database hosting
›Railway — background job processing
We may disclose information when required by law, court order, or government request, or to protect our rights and safety. In the event of a business transfer (acquisition, merger), user data may transfer as part of the transaction.
Data Security
We use industry-standard security measures including HTTPS/TLS encryption, secure authentication via Clerk, and PCI-compliant payment processing via Stripe. No security measure is absolute; you are responsible for keeping your authentication credentials secure.
Your Rights
Correction. You can update your account information at any time via the Account settings.
Deletion. You can delete your account via the Clerk account-management flow, which triggers data removal from our systems. Some data may be retained for legal or financial-records purposes (typically up to 7 years for transaction data).
Subscription cancellation. Cancel any time via
/account/billing. Access continues through the end of the paid period.
Children's Privacy
PokeMarket is not directed at children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it.
International Users
PokeMarket is operated from the United States. Users outside the US should be aware that data is processed in the US under US privacy law.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on the site. Continued use of the service after changes constitutes acceptance.