Privacy Policy

Effective 25 September 2026 · Terms of Service

Draft — pending legal review This describes exactly what the app does today, written from the code. It has not yet been reviewed by a lawyer. If anything here turns out to be wrong, the behaviour described is what the software actually does, and we will correct the wording rather than quietly change the behaviour.

Hobbybook is operated by Sawyer Wright, Huntington Station, New York. Questions or requests: sawyer@sawpoint.net.

The short version: we hold what you put in, we send your card photographs to one company to read them, we ask two licensed price feeds what cards are worth, and we use an email service to send you links. We do not advertise, we run no analytics or tracking of any kind, and we do not sell personal information.

What we hold

What	Why
Your name and email address	To have an account and to email you about it
Your password, hashed with scrypt and a per-account salt	To sign you in. The password itself is never stored and cannot be recovered from what is
Photographs of your cards	They are your record of the card. They are what gets read to identify it
Your cards and what you say about them — set, number, grade, condition notes, where you keep them, your tags, quantity, what you paid, what you are asking	This is the collection. It is the product
Cards you have marked sold, and for how much	Your own sales record
A log of changes you make to your collection	So an accidental edit can be traced and undone
How many scans you have used this month	To apply the allowance on your plan
Your IP address, briefly	Only to rate-limit sign-in, sign-up and password-reset attempts. It is not attached to your account or kept as a history
One cookie, `cv_session`	To keep you signed in. It is HttpOnly, Secure and SameSite=Lax. There are no other cookies and no third-party cookies

Your photographs

A card photo is stored on our server and served over HTTPS at an address containing a long random-looking name derived from the file itself. Nothing lists those addresses and they are not indexed, but the address is the only thing protecting the file — anyone you send one to can open it. Deleting the card, or your account, removes them.

Who else sees your data

Only these, only for the purpose named, and never for advertising.

Google (Gemini API) — your card photograph, so it can be read into a name, set and number. We use the paid tier, where Google states it does not use prompts or responses to improve its products; Google logs them briefly to detect abuse. We deliberately do not use Google's free tier, whose terms allow human review and product training.
SportsCardsPro and JustTCG — the card's name, set and number, to ask what it is worth. Not your name, not your email, not your photograph.
Resend — your email address and the message, to deliver confirmation and password-reset mail. Our mail is sent from mail.sawpoint.net.
eBay — only if you choose to connect your own eBay account, and only for cards you choose to list. Early-access accounts cannot connect eBay at all.

We do not give your information to anyone else, and we do not sell it. If we are ever legally compelled to hand something over we will tell you, unless we are forbidden from doing so.

Two things that are off unless you turn them on

Share my sales. Off by default. Turning it on contributes the price, date, grade and venue of cards you have sold to a shared pool that makes prices better for everyone. It never includes a buyer's name, an order number, a listing title, a note or a photograph. Turning it off deletes your rows, it does not merely stop new ones.
Share links. If you create one, anyone holding that link can see the collection it points at, without signing in. You can revoke it at any time.

Seeing, changing and deleting your data

Everything you have entered is visible and editable in the app.
Export — Settings gives you your whole collection as a CSV or a full report, any time, without asking us.
Delete — Settings deletes your account and everything in it: collection, photographs, sold records, change log, sessions. It asks you to type your own name and your password first. There is no undo, and we cannot restore it for you.

Server backups may keep a copy for a short period after deletion before they rotate out.

Do Not Track

We do not track you, here or anywhere else, so there is nothing for a Do Not Track signal to switch off. We do not honour it because we do not need to. No third party is permitted to collect information about your behaviour across other websites through Hobbybook.

Children

Hobbybook is not intended for children under 13 and we do not knowingly collect their information. If you are under 18, use it with a parent's permission. If you believe a child has created an account, email us and we will remove it.

Security, honestly stated

Passwords are hashed with scrypt and salted per account. The site is served over HTTPS only. Sign-in, sign-up and password-reset attempts are rate-limited. Administrative functions are restricted and answer as though they do not exist to anyone else. No system is perfectly secure and we will not pretend otherwise; if something happens that affects your data, we will tell you.

Where it is kept

On a server in the United States. Our price feeds and Google may process requests elsewhere.

Changes

If this policy changes we will update the effective date at the top and, for anything that materially changes what we do with your information, email you before it takes effect.