Mana Maesters.

Legal

Privacy

Last updated 6 October 2026. This describes what Mana Maesters Cards stores, who else sees it, and how to delete it. It is written from the database schema rather than from a template, so it should match what the site actually does.

If you never make an account

You can scan cards, look up prices and keep a collection without signing up. Cards saved that way live in your own browser's storage on that device. They are never sent to us, we cannot read them, and clearing your browser data deletes them.

Card photographs you scan are sent to Anthropic's API to be identified, and price lookups are sent to eBay as search terms. Neither is stored against you.

If you make a collector account

We store these, and you can see all of them on your account page:

  • Your sign-in. Email address and a password hash, held by Supabase. We never see your password.
  • Your profile. Handle, display name, bio, and whether the profile is public.
  • Your cards. Card identity, a thumbnail image, quantity, status, and any asking price you set.
  • Your private records. Purchase cost, sale price, fees, shipping cost, storage location and private notes.
  • Your wishlist. Cards you want, target prices, and any price alerts they generated.

What other people can see

A profile is private until you publish it. Publishing makes your handle, display name, bio and the cards you marked public visible to anyone with the link or your QR code — there is no password on a public profile, by design, because the point is to hand someone a code at a show.

Your private records are never public. Purchase cost, sale price, fees, shipping, storage location and private notes live in a separate table that anonymous visitors have no database permission to read at all — not a hidden column, a different grant. Cards you mark private stay private even on a published profile, and unpublishing hides everything again immediately.

Who else your data touches

  • Supabase — stores your account and everything above.
  • Vercel — hosts the site, and collects aggregate traffic and performance measurements about page views.
  • Anthropic — receives card photographs you scan, in order to identify them.
  • eBay — receives search terms when prices are looked up, and provides listing data and images.
  • PSA — receives a certification number if you choose to look one up.

We do not sell your data, and we do not share your private records with anyone.

Deleting it

Open your account page and choose Close this account. That removes your profile, every saved card, every private record, your wishlist and your alerts. It is immediate and we cannot undo it or recover it for you, so download a backup first if you want to keep anything.

You can also export everything yourself at any time, as a private JSON backup or a CSV, without closing your account.

Asking us

Questions, or a request about your data: manamaesterscards@gmail.com.

This page describes how the site is built. It is not legal advice and has not been reviewed by a lawyer. See also the terms of use.