Privacy
Pokelit is an iPhone app, in a TestFlight beta, and this website. The short version: it keeps your account and the cards you record so it can show you what they are worth, it sends a scan's photo to be read and does not keep it, it has no ads and no tracking, and it sells nothing about you to anyone. You can delete your account from the app at any time.
Last updated September 25, 2026.
Your account
You sign in with an email and password or with Sign in with Apple. The account is held by Supabase, which stores your email address (or the private relay address Apple gives when you ask it to hide yours), a password hash if you set one, and when you signed in. Confirmation and password emails are sent through Resend. Your plan (Free or Plus; everyone is on Plus during the beta) is stored beside it.
What you record
When you press I bought this, the app stores that purchase: the card, its printing, condition or grade and cert number, what you paid with tax and shipping, the day and the venue, and anything you choose to add, such as the seller, an order number, a listing link or a note. Each night the service records what each card you hold is worth that day. That is how the app draws your binder, your worth and its line.
These records are yours. During the beta they are used for nothing except showing them to you. If that ever changes, for example to study what cards really cost to buy across everyone's purchases, this page will say so first and you will be asked.
Scanning a card
A scan reads the card on your phone first. When that is not enough, the photo is made smaller and sent once to the Pokelit service, which sends it to Anthropic's API to read the name, number and set printed on it, under Anthropic's commercial API terms and retention. The service does not store the photo. It keeps what was read (text, not the picture) in memory for a while so the same photo is not read twice, and that is gone when the service restarts. The app counts your scans to apply the day's limit.
What stays on your phone
Your sign-in is kept in the iPhone's keychain. The app keeps a copy of your binder and the day's market so it opens without waiting, the searches you made and the cards you looked at, and the card pictures it has shown. None of that leaves your phone, and deleting the app deletes it.
What the service logs
Each request to the service is logged with the account it came from, the route, the result and how long it took, and a scan with how much of the model it used. The log is used to keep the service running and to hold its costs, and nothing else.
Where the prices and pictures come from
Raw card prices come from TCGCSV, a mirror of TCGplayer's market prices. Graded prices are eBay sales by grade from PokemonPriceTracker. Card details come from TCGdex. Card pictures load directly from TCGplayer's and TCGdex's image servers, which see the request the way any site that shows an image does. The service asks these sources about cards by their catalogue numbers and never sends them anything about you.
Who handles the data
- Supabase: your account and the app's database (United States).
- Render: runs the Pokelit service the app talks to.
- Anthropic: reads the photos a scan sends.
- Resend: sends account emails, and holds your email if you join the waitlist.
- Vercel: hosts this website.
- Apple: Sign in with Apple, and TestFlight, which passes on crash reports and any feedback you choose to send.
Each keeps ordinary server logs, including IP addresses, for its own operation, under its own privacy policy. There is no analytics, no advertising and no third-party tracker in the app or on this site, and nothing about you is sold or shared for anyone's marketing.
Deleting your account
In the app, open the account menu and choose Delete account. Your sign-in and email are deleted at once, along with your plan and scan counts, and every purchase you recorded loses its seller, order number, links, notes, cert number and the details kept with it. The service's logs keep the requests but no longer say whose they were.
The book of purchases cannot be edited, by design, because it is a cost record. So the bare numbers of each purchase (the card, the price and the day) stay, tied to an account that no longer exists, marked as deleted, and never used for anything.
This website
The public pages keep nothing about you. If you join the waitlist, your email goes to Resend until you unsubscribe. The operator's own pages sit behind a password, set one cookie that holds a signed expiry and nothing about you, and are gone in twelve hours or when you press Lock. The fonts are served from this site, not from Google.
Children
Pokelit is not meant for children under 13 and does not knowingly hold anything about them. If you think a child has an account, write to the address below and it will be deleted.
Not financial advice
Prices, figures and the most to pay are measurements of market data and of a model, shown for your own use. They are not advice or a recommendation to buy or sell anything, and carry no warranty of accuracy.
Questions, or a request about your data: danielfang7@gmail.com
Your binder, priced every night.
Email daniel@pokelit.com to hear at launch.