Privacy

PokéFig is a figure collection tracker. We don't sell your data, we don't share it with advertisers, and there are no ads.

You can use the whole catalog without an account. An account does one thing: it backs up your collection and syncs it across your devices.

Your collection lives in your own browser's storage. It doesn't leave your machine and we can't see it.

We record the country of the visit (country only, aggregated) and anonymous usage stats through Vercel Analytics, which doesn't use tracking cookies or profile people.

If you use the search, we store the phrase — not tied to you — to see what the catalog is missing.

Accounts are handled by Clerk. We store your email and, if you sign in with Google, the name and profile picture Google shares. We don't ask for or receive access to your Gmail, your contacts, or any other service.

In our database we keep your collection, your lists and your plan. A nightly backup copies those tables and is kept for 30 days, then deleted automatically.

If you write to us through the feedback form, we keep the message and the email you leave, if you leave one.

Using your collection to suggest pieces to you is a separate permission, and it starts off. You can grant or withdraw it any time in your account, under «Data». While it is off, we don't look at it for that.

When you ask us to identify a figure or check whether it's genuine, the photo travels to Anthropic for the model to analyse, and the result comes back.

The photo is NOT stored on our servers. From that scan we keep only text labels — which Pokémon, which brand, how confident — to measure whether the identifier gets it right.

A photo you send to the community gallery is different: that's a deliberate publication. It's stored, moderated and shown. You can ask us to take it down.

Clerk, for accounts. Supabase, where the database and images live. Vercel, which serves the site and provides the anonymous analytics. Anthropic, only for the photos you send to be analysed. Resend, for the emails we send you.

None of them receives your collection to use on their own account: they're infrastructure providers.

The day payments turn on, Stripe will process the card. We never see or store the number. Today billing is off.

Export your collection to CSV whenever you want, without asking anyone. It's yours, and that export exists precisely so you're never locked in here.

Ask us to delete your account and everything attached to it by writing to figu@pokefig.com. We do it and confirm back.

Use the app without an account indefinitely, with the caveat that your collection will only live in that browser.

PokéFig isn't aimed at children under 13 and we don't knowingly collect their data. If you think that happened, write to us and we'll delete it.

If this changes, the date above changes. No notices buried anywhere.

For anything privacy-related: figu@pokefig.com.