Privacy Policy
Last updated: 7 September 2026
Pokemon Deal Finder (https://pokemondealfinder.com) is a free tool that scans eBay listings for Pokemon trading cards and compares them against market reference prices. There are no user accounts. This page explains what data the site touches and why. If a practice is not described here, it is not something the site does.
Server logs and hosting
The site is hosted on Vercel. Like any website, our hosting provider records standard request information — your IP address, browser user-agent, the page requested, and a timestamp — for security, abuse prevention, and operating the service. These logs are held by the hosting provider for a limited period and are not used to build a profile of you or combined with anything else.
Analytics
We use Vercel Web Analytics and Vercel Speed Insights to see aggregate page views and page-load performance. They are privacy-oriented: they do not set cross-site advertising cookies and do not track you across other websites. We see totals and trends, not individuals.
Product analytics (PostHog)
To understand which parts of the site actually help people find a deal, we use PostHog for anonymous product analytics, running in fully cookieless mode. It stores nothing in your browser — no cookies, no local storage, no session storage — and it builds no user profile. It cannot recognise you across days. We record simple interaction events (a page or section was viewed, a link or filter was clicked, a search returned results or none), along with your device type, a coarse country, and any campaign tag on the link you arrived from.
We never send your search text, your email address, form contents, or anything you type — only structural facts about a search (for example “two words, mentioned a grade, mentioned a price”). Analytics data is processed by PostHog on servers in the European Union. If your browser sends a Global Privacy Control or Do Not Track signal, this analytics does not run at all. It is also entirely disabled unless a project key is configured.
Storage in your browser
The site stores a few small preferences in your browser's local storage (not cookies). These never leave your device and are not sent to us:
- your currency and region / “shipping to” choice;
- cards you have saved and cards you have recently viewed;
- a timestamp of your last visit, used to show a “new since your last visit” count.
You can clear all of this at any time by clearing site data for https://pokemondealfinder.com in your browser. The product analytics described above stores nothing in your browser at all.
Affiliate links
Pokemon Deal Finder participates in the eBay Partner Network and the TCGPlayer affiliate program (administered through Impact.com). Outbound listing and price links carry an affiliate tag, and a script from Impact.com (loaded on the site) rewrites TCGPlayer links and records affiliate click and impression attribution so the retailer can credit a resulting purchase. This does not change the price you pay, and there is no paid placement — see the affiliate disclosure. When you click through to eBay or TCGPlayer, their own privacy policies apply.
Price alerts and deal emails
These are optional and you only take part if you ask to. There are two kinds:
- Per-card price alerts — on a card page you can ask to be emailed when that card next has a listing at or below a price you choose. We store your email address, the card and target price, and a random unsubscribe token.
- Deal alerts / the deals digest — an occasional email of standout below-market finds. You can sign up from a short form on the site. We store your email address, a random unsubscribe token, the date, which on-site page the form was submitted from, and any campaign tag (a short utm_source / utm_campaign code) on the link you arrived from — so we can see which content brings people in. We do not store your name, the page URL, or anything else you type.
Both use double opt-in: we send a confirmation email and only ever send you the alerts or digest after you click to confirm, using our transactional email provider (Resend). Every message has a one-click unsubscribe link; unsubscribing is final and stops all further email (an old confirmation link will not silently re-subscribe you). These addresses are stored in our database (Supabase), are not used for anything else, and are never sold, rented, or shared for marketing. You can email us to have the record deleted entirely.
Contact
If you email pokemondealfinder@gmail.com, we use what you send only to respond to you.
Google API data
Pokemon Deal Finder has a private, owner-only integration with Google Search Console. It uses a single read-only scope:
https://www.googleapis.com/auth/webmasters.readonly
Purpose
To read Search Console performance data for the pokemondealfinder.com property — search impressions, clicks, click-through rate, average position, and which pages and queries drive them — so the owner can monitor and improve this site's own search performance.
Access and storage
The OAuth client credentials and the resulting access token are held only in the site owner's private local admin tooling. They are never included in any page, never in client-side code, never deployed to our hosting provider, and never exposed to site visitors. The integration is read-only: it cannot change anything in Search Console, submit URLs, or modify sitemaps.
Use and sharing
Data obtained through this Google integration is used only to operate and improve Pokemon Deal Finder's own search and SEO performance. It is not sold, and it is not shared with any third party or used for advertising.
Revoking access
The site owner can revoke this application's access at any time from the Google Account permissions page (myaccount.google.com/permissions) and by deleting the local token and credential files.
Google API Services User Data Policy — Limited Use
Pokemon Deal Finder's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically: the Search Console data is used only for the read-only performance-monitoring functionality described above; it is not transferred or sold to third parties, including for advertising or any advertising-related purpose; it is not used for personalised advertising; and it is not used for any purpose other than the one disclosed here. Humans do not read this data except where necessary for security, to comply with the law, or with the owner's explicit consent.
Service providers we rely on
- Vercel — website hosting, plus the analytics and speed-insights described above.
- PostHog (EU) — anonymous, cookieless product analytics described above.
- Supabase — the database that stores the site's catalogue, deal data, and any price-alert / newsletter records.
- Resend — sends the confirmation, price-alert, and weekly-digest emails.
- Impact.com — administers the TCGPlayer affiliate program and the affiliate attribution tag.
- eBay Partner Network — affiliate program for eBay links.
- PokemonPriceTracker and JustTCG — provide the Pokemon card catalogue and market reference pricing shown on the site.
- Google Search Console — the private, read-only owner integration described above.
What we do not do
- We do not sell or rent personal data.
- We do not build advertising profiles or run personalised ads.
- We do not share email addresses with anyone for marketing.
- We do not require an account, a password, or a payment method — purchases happen entirely on eBay or TCGPlayer.
Data retention
Hosting logs are kept by the hosting provider for a limited period and then discarded. Analytics are aggregate and retained as totals. Price-alert and newsletter records are kept while the subscription is active; when you unsubscribe the record is marked inactive, and you can ask us to delete it entirely. Emails you send us are kept only as long as needed to resolve your enquiry.
Your choices
- Clear the site's browser storage at any time via your browser's “clear site data” controls.
- Unsubscribe from any alert or digest email using the link in that email.
- Email pokemondealfinder@gmail.com to have your price-alert or newsletter data deleted.
- Most browsers let you block scripts or storage per site if you prefer.
Children
This site is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us an email address, contact us and we will remove it.
Changes to this policy
If this policy changes, the updated version will be posted here with a new “last updated” date.
Questions about privacy? Contact us.