Privacy Policy

Account and Authentication Information

When you create or access a CrowdGrade account, we collect or receive:

• Your email address.
• Your name or display name, and profile choices such as your profile card.
• A unique CrowdGrade account identifier.
• Authentication identifiers and basic account information from the sign-in method you choose: Sign in with Apple, Google, Microsoft, or passwordless email.

Sign-in is handled through Microsoft Entra. We do not receive or store the password for any third-party account.

Date of Birth

We ask for your date of birth to confirm you are at least 18, the minimum age to use CrowdGrade (see Section 12). We store it with your account and use it only for age eligibility and legal compliance. It is never shown on your profile or to other users.

Where Apple provides it, we also ask the App Store for your account's age range (for example, “18 or older”) through Apple's Declared Age Range feature, and use it only to confirm you meet our minimum age. The check happens on your device: Apple does not give us your birth date, and the age range is not sent to our servers or stored.

Collection, Card, and Grading Information

When you use CrowdGrade, we store information about your activity, including:

• Trading cards and sealed products you add to or remove from your collection, and the cards you feature in your display case.
• Grades you record for your own cards, and the grades you give to other users’ CrowdGrade submissions.
• Cards you submit for community grading and their results.
• Rip sessions you log, and the estimated values, pricing, and collection-value history associated with your account.
• Your CrowdGrade Score and tier, which are calculated from your grading activity.

Photos and Other Content You Submit

When you submit a card for community grading, you upload photographs of the card. We store these photos with your submission. Before a photo is stored, it is automatically reviewed (see Section 3).

Social and Community Information

• Friend requests you send, receive, accept, or decline, and your list of friends.
• Activity shared with your friends, such as cards added to your collection and completed rip sessions.
• Comments you post on your friends’ activity and on CrowdGrade submissions, and the posts you like.
• Reports you submit about other users’ content, including the reason you choose.
• Users you block.

Device and Notification Information

If you allow push notifications, we store a push-notification token issued by Apple and an identifier for your app installation so we can send notifications to your device. We also store basic information about your sign-in sessions, such as when they were created and the network address and app version they were created from, to keep your account secure.

Technical, Usage, and Diagnostic Information

We collect technical and operational information needed to run, secure, diagnose, and improve the Services. This may include app version, device or operating-system information, request and response information, feature usage, timestamps, error details, performance data, logs, and diagnostic information.

CrowdGrade uses Microsoft Azure Application Insights for application monitoring and diagnostics. Depending on configuration, Application Insights may process telemetry such as requests, dependencies, exceptions, traces, performance metrics, technical context, and custom events that we configure. Microsoft Azure may temporarily process an IP address for network and approximate geolocation purposes. Under Microsoft's default Application Insights behavior, the full IP address is not stored after geolocation processing.

CrowdGrade is a community service. The following is visible to other CrowdGrade users:

• Your display name, profile card, CrowdGrade Score, tier, and leaderboard ranking.
• Cards you submit for community grading, including their photos, while they are open for grading, and their community results.
• Your display-case cards.
• Your total collection value, on leaderboards and your profile, unless you turn off “Show in leaderboards” in Settings. Your friends can always see it.
• Your comments, to everyone who can see what you commented on: comments on a friend’s activity are seen by that friend and their friends, and comments on a CrowdGrade submission by other users who can see the submission.
• Your likes: people who can see a post can see who liked it.

Your friends can also see your full collection, the activity you share with them, and when you were last active (“Active recently”), which is based on when you last posted, graded, liked, or commented. Other users cannot see your email address, date of birth, or the reports you submit. A user you block cannot see your profile or submissions, and you cannot see theirs.

To keep the community safe, every card photo is automatically reviewed when it is uploaded, before it is stored or shown to anyone. We use Microsoft Azure AI Content Safety to screen for inappropriate content and an Azure OpenAI model to check that the photo shows a trading card. Both run within our Microsoft Azure environment. A photo that fails review is not stored.

Comments are also checked automatically when you post them, against a list of prohibited words and with Microsoft Azure AI Content Safety for hateful, sexual, violent, or self-harm content. A comment that fails is not posted, and we do not keep its text.

We keep a record of each review result, such as whether a photo was accepted and why, but not the photo itself. We use these records, together with reports from users, to detect and respond to abuse. We may review reported content manually and may remove content or restrict accounts that violate our Terms of Service.

We use the information we collect to:

• Create, authenticate, maintain, and secure CrowdGrade accounts.
• Confirm that users meet our minimum age requirement.
• Provide card search, collection management, grading, community grading, pricing, leaderboards, friends, and other features.
• Store and synchronize account, collection, grading, and photo data.
• Send push notifications you have allowed, such as friend requests and grading results.
• Review uploaded photos and comments, investigate reports, and enforce our Terms of Service.
• Operate, maintain, monitor, troubleshoot, and improve the Services.
• Detect crashes, performance problems, security issues, fraud, abuse, or unauthorized activity.
• Respond to support requests, feedback, and communications.
• Comply with legal obligations.

We may also use aggregated or de-identified information that cannot reasonably be linked to an individual user to understand usage trends and improve CrowdGrade.

We use third-party service providers to operate CrowdGrade. They process information on our behalf only as needed to provide their services:

• Microsoft Azure, for cloud hosting, databases, photo storage, sign-in (Microsoft Entra), photo and comment review (Azure AI Content Safety and Azure OpenAI), messaging, monitoring, and diagnostics.
• Apple, for Sign in with Apple, push notifications (Apple Push Notification service), and app distribution through TestFlight and the App Store.
• Google and Microsoft, if you choose to sign in with them.

Card catalog and pricing information comes from third-party data sources. We do not send your account information to them. Card and product images are loaded by the app directly from third-party image hosts: the Pokémon TCG API's image server (images.pokemontcg.io, delivered through Cloudflare), Scrydex (images.scrydex.com), and TCGplayer's image server. Like any website your device connects to, these hosts receive your device's IP address and basic request information (such as the app and device type) in order to deliver the images. We do not control how they handle that information.

If we add a service provider that materially changes how personal information is handled, we will update this Privacy Policy.

Other Users

Information described in Section 2 is shared with other users as part of how the Services work.

Service Providers

We share information with the service providers described in Section 5.

Legal and Safety Reasons

We may disclose information if we reasonably believe disclosure is required by law, legal process, or a valid governmental request, or is reasonably necessary to protect CrowdGrade, our users, or others; investigate fraud or abuse; enforce our agreements; or protect legal rights.

Business Transfers

If CrowdGrade LLC is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

CrowdGrade does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not use third-party advertising or tracking in the app.

We keep your account information, collection, grading data, photos, and other content for as long as your account exists, unless you delete it sooner. When you delete your account, we delete this information as described in Section 8.

Some records are kept for a limited time or for specific purposes:

• Photo review records, which contain a numeric account identifier and the review result but no photo, email address, or name, are kept to help us detect and prevent abuse.
• Internal event records used to deliver notifications are deleted automatically after about 30 days.
• Diagnostic logs and telemetry are kept according to our Microsoft Azure retention settings.
• Information may remain in backups for a limited period before it is overwritten.

You can delete your account at any time in the CrowdGrade app: open the Account tab, then tap Delete Account. Deletion is permanent and cannot be undone.

Deleting your account removes your account and profile, date of birth, collection, grades, community grading submissions and their photos, rip sessions, friends and friend requests, activity, comments, likes, notifications, device registrations, reports, and blocks. Other users will no longer see your profile or submissions. Some limited records are kept as described in Section 7.

Your sign-in account is also stored in Microsoft Entra, which we use to operate sign-in. To have it removed as well, or if you cannot access the app, email privacy@crowd-grade.com. We may need to verify your identity before completing the request. If you used Sign in with Apple, you can also stop using Apple sign-in with CrowdGrade in your Apple Account settings.

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, disclosure, alteration, or destruction. However, no internet service, application, or electronic storage system can be guaranteed to be completely secure.

You can control certain information directly in the app:

• Change your display name and profile card.
• Hide your collection value from leaderboards and non-friends with “Show in leaderboards.”
• Remove cards, discard unpublished submissions, and unfriend or block other users.
• Turn push notifications on or off in your device settings.
• Delete your account (Section 8).

Depending on where you live, you may have rights to request access to, correction of, or deletion of your personal information, or information about how it is used. To make a request, email privacy@crowd-grade.com. We will not discriminate against you for exercising these rights.

CrowdGrade can send push notifications, for example about friend requests and your grading results. The app asks for your permission first, and you can turn notifications off at any time in your device settings. When you sign out, we deactivate your device's registration for notifications.

CrowdGrade is only for adults. It is not directed to children or anyone under 18, and people under 18 may not create an account. We ask for a date of birth before sign-in, and a person who enters a date of birth showing they are under 18, or whose app store age range shows they are under 18, cannot continue to sign in. If we learn that an account belongs to someone under 18, we permanently delete that account and its information.

If you believe a person under 18, including a child under 13, has provided us with personal information, please contact privacy@crowd-grade.com and we will delete it.

The Services may contain links to, data from, or integrations with third-party websites or services. CrowdGrade is not responsible for the privacy practices of third parties, and their handling of information is governed by their own policies.

CrowdGrade and its service providers may process or store information in the United States or other countries where they operate. Those locations may have data-protection laws different from those in your country of residence.

We may update this Privacy Policy as CrowdGrade evolves. When we do, we will update the “Last Updated” date above. If changes are material, we will provide additional notice through the app, website, email, or another appropriate method.

If you have questions, concerns, or privacy requests, contact us at: