Privacy at HoloTap.

Information you provide

• Account and profile: your sign-in email, account identifier, collector name, optional bio and profile photo.
• Your collection and Collector Studio: card details and photos, linked NFC tag identifiers, notes, values you enter, saved listings, collection preferences, and the trackers, reminders and reports you save.
• Community and safety: posts and replies, direct messages and their conversation participants, follows and friend connections you create in HoloTap, blocked profiles, and the reasons and details you submit in safety reports. These records are linked to your account to provide community features, deliver conversations and handle reports.
• Support requests: the topic, description and optional order or card reference you explicitly submit, linked to your account with a receipt and status. These requests are available to you and authorized HoloTap operations staff. AI chat is not automatically attached or submitted. Support request text is removed when your account data is deleted.
• Trading and purchases: offers, counteroffers, order status, transaction amounts, membership status, and payment-provider references.
• Personalization and earlier activity: favorites, digital finishes, activity history, and any game answers, results, XP, achievements or goals saved before the games navigation was replaced.

Camera access is optional and used when you open Live Lens or choose to take a card or profile photo. Photo-library access is used when you choose an existing photo. NFC is used when you start a scan on a compatible installed app. You can manage device permissions in your phone settings.

How the service uses information

We use this information to sign you in, save and sync your collection, display the profile you choose, process offers and purchases, provide collection tools and support and protect accounts from misuse. Your unlisted vault and its private notes are account data. Listing a card shares the listing details and its available artwork with other signed-in collectors. Offers and completed trades share relevant card and transaction information with the other participant.

A signed-in person with a card’s NFC link can see a limited summary: its name, category, set and recorded condition. The link does not reveal private notes, purchase cost, your estimate, your full vault or editing controls. Uploaded photographs still follow the card’s sharing and blocking permissions; publicly available catalog artwork may be visible.

Our hosting services also process technical information such as IP addresses, request times and service errors to deliver and protect the website and API. Sign-in tokens and preferences are stored on your device; the native app uses protected device storage for sign-in credentials.

Services that help HoloTap work

• Netlify: website and API hosting, authentication and operational logs. When the photo permission notice names Anthropic via Netlify AI Gateway, Netlify also receives and forwards the selected card photos to Anthropic for that optional tool.
• Supabase: the database holding account-linked collection and service records.
• Stripe: checkout, membership billing and seller payment setup. Full payment-card details and seller identity documents are entered directly into Stripe. HoloTap keeps payment references and status, not your full payment-card number.
• Card catalog and artwork providers: ordinary catalog searches send your search terms to the selected provider. Artwork may load from that provider, which receives the network request needed to serve it. CardSight also receives selected card photos when you allow its separate optional photo-identification permission, as described below.
• Expo and Apple: app build, distribution and platform services when you install or update the app. For Apple in-app purchases, Apple handles billing. HoloTap verifies signed transaction and subscription information with Apple, and stores product identifiers, transaction references, purchase or renewal dates, refund or expiration status, and an account token linking the purchase to your HoloTap account. HoloTap does not receive your Apple Account password or full payment-card details.

These providers process information according to their own applicable policies. They may operate in countries different from yours.

Community safety checks

When enabled, newly submitted photos, story captions, comments, trade messages and chats are sent through our server to Anthropic for automated safety checks before publication or delivery. Checks look for explicit content, threats and abusive content; they do not authenticate cards. We do not send account, address or payment details with these checks. A failed check prevents sharing and provides a retry or support path. Automated decisions can be mistaken: contact holotapcards@gmail.com to request review. Reporting and blocking remain available.

Optional AI support

AI support is optional. Before an AI request, HoloTap asks permission to send the message and recent conversation context through its server to Anthropic, the AI provider. The assistant does not receive access to your private vault or payment account. You can use the local help guide without AI permission.

You can withdraw AI permission in support. Withdrawal stops future AI requests; it cannot recall information already sent. The chat is not saved as a HoloTap support ticket. Do not include passwords, verification codes, identity documents or payment details in chat. See Anthropic’s privacy policy for its handling of data.

AI-assisted marketplace search

Ordinary marketplace search uses HoloTap’s listing database. If you choose Suggest filters with AI and allow that search, HoloTap sends the text you entered to Anthropic to propose card, category, year, condition and price filters. It does not send your saved cards, private messages or account profile with this request. Do not include personal or payment information in a search. You can review or change the suggested filters before applying them, or use ordinary search without AI.

The suggestion is not a card identification, valuation or guarantee that a listing exists. HoloTap’s search usage counters store hashed account identifiers and counts, not the search text. Account-scoped search counters are removed during account deletion; counters older than 35 days are removed by the scheduled cleanup. Technical request logs may still include search URLs as described above. Anthropic processes the submitted text under its applicable terms and privacy policy.

Optional card photo tools and permissions

Card identification, photo clarity checks and Photo Reports use selected card photos. Before HoloTap sends those photos to an optional photo provider, it asks you to review the named recipient, purposes and current notice and choose Allow. Camera or photo-library access, catalog-matching permission and AI support permission do not grant this separate permission.

• CardSight: receives your selected card front and optional back to suggest the printed card identity and matching catalog records.
• Anthropic: receives selected card photos for identification, clarity checks or a Photo Report with visible-condition observations. When the notice names Anthropic via Netlify AI Gateway, Netlify receives and forwards those photos to Anthropic. A photo may be read again to distinguish possible printings.

A fallback to another photo provider requires permission for that provider too. The permission is saved to your HoloTap account for the named provider and current notice. A changed recipient or notice requires a new review. The tools receive the selected photos and the instructions needed for that task; they do not gain access to your whole photo library, private vault or payment account. Avoid including faces, addresses, receipts or other personal details in card photos.

Open Settings → AI card photo permissions to review or remove a provider’s permission. Once removal is saved, it stops future optional photo transfers to that provider; it cannot recall photos already sent. Choosing Not now keeps manual collection, ordinary catalog search and NFC features available. Saving or publishing photos still requires the separate community safety checks described above; optional photo permissions do not turn off those checks. AI observations do not authenticate or professionally grade a card.

See the applicable policies from CardSight, Anthropic and Netlify for their handling of information. Removing HoloTap’s permission is not a request to delete information already received by a provider.

Live Lens on iPhone

Live Lens reads card outlines and text continuously on your iPhone. It processes camera frames in memory; this live-reading feature does not save or upload those frames. Before catalog matching starts, it asks permission to send recognized or corrected card words through HoloTap to its card-data providers. Catalog search requests may also be processed in the service’s technical logs described above. Source camera frames are not sent with these text-only searches. Choosing photo identification, a clarity check or a Photo Report is a separate action governed by the optional card photo permissions above.

You can keep reading locally without catalog permission or choose Turn catalog matching off to stop future searches. Turning it off cannot recall search words already sent. Confirmed catalog entries and selected price references stay in the current app session; they are not automatically saved to your vault or registered to an NFC tag. Connecting a tag, saving a vault card, and submitting a Photo Report are separate actions. Live Lens does not determine authenticity or assign a condition grade.

Optional Photo Report and tracker

Lens Photo Report is separate from live camera reading and the support chat. It uses the selected front and any selected back or detail photos for identity and visible-condition observations. The named photo provider and, when used, Netlify AI Gateway are shown in the optional card photo permission notice above. A report can run only while the account has that provider’s current permission. You can use the catalog and NFC features without photo-analysis permission.

HoloTap processes these photo bytes for the request and does not save them in its photo-analysis report records. Selected photos can remain in the current app session or browser tab while you work. On the phone, camera and photo-preparation tools may also leave temporary files in the app cache. Removing a selected photo clears it from the report draft and does not delete the original from your Photos library. A later decision to upload a photo to your NFC vault is a separate action. Anthropic processes the submitted photos under its applicable terms and privacy policy; withdrawing permission cannot recall photos already sent.

A completed check automatically saves a private report draft to your HoloTap account. The report includes AI identity and visible-condition observations, uncertainties, the report date, and any supported catalog price reference. The report’s follow-up catalog lookup sends identification terms, not source photos, to look for an exact printing. This text lookup is separate from optional CardSight photo identification, which does send selected photos with your permission. Choose Keep to put a report in your private tracker and optionally record what you paid in USD. Kept reports sync between the website and app. Source photos are not retained with those reports.

Remove erases that report’s contents and recorded purchase cost from HoloTap’s tracker storage. A minimal request identifier, photo fingerprint, consent version and request timing/status remain to prevent duplicate processing and enforce usage limits. The fingerprint is a one-way hash, not a saved copy of the photo. Report drafts remain account records unless removed or the account is deleted. Account deletion also removes these report records. Sharing a report is optional and occurs only when you choose a sharing action. AI observations and catalog references may be incorrect; they are not authentication, a professional grade, an appraisal or a guaranteed sale price.

Updating and removing information

You can edit your profile, remove your profile photo and update collection details from your account. To delete your account, open your profile, then Privacy & safety. Review the removal and billing information, save your private receipt, type DELETE and confirm. In the app, open You, then Delete account.

Deletion removes your sign-in account, collector profile, vault records, uploaded photos, Collector Studio records, watchlist, NFC registrations, digital finishes, favorites and earlier game progress. HoloTap cancels website subscriptions billed through Stripe without a final invoice or an automatic refund. Deleting your HoloTap account does not cancel an Apple subscription. Cancel Apple subscriptions separately in your Apple Account subscription settings. Payments and paid orders already in progress must be resolved safely.

Deletion normally starts within 2–5 minutes. Pending payments or a service outage can take longer. Your saved receipt lets you check status without signing in. Only a completed status confirms that your account and personal app data have been removed.

Limited order, payment, payout, royalty and fraud-prevention records remain where needed for existing financial obligations. Shipping details still needed for a paid order are retained. Apple and Stripe keep their own payment records. HoloTap retains minimal verified Apple transaction records for purchase ownership, billing obligations and fraud prevention, while removing the account-token mapping during account deletion. A minimal account identifier and receipt record remain to prevent deleted data from being recreated. We do not promise a fixed purge date for these required records.

For data access, correction, deletion help or a request you cannot complete in your account, email holotapcards@gmail.com from your account email. We may need to verify that the request is yours. Do not send passwords, identity documents or your private deletion receipt by email.

Reliability and operational records

HoloTap uses Sentry for app crash diagnostics, including the app version, operating system, device model, technical stack traces and a randomly generated installation identifier for native crash reports. We do not enable session replay or screenshots for crash reporting, and remove account details, request payloads and message breadcrumbs from JavaScript error reports. Native crash reports may contain the installation identifier so repeated failures on the same installation can be diagnosed. Crash data helps us reproduce and fix failures; it is not used for advertising. See Sentry’s privacy policy.

Our server records successful scans, listings, offers, payments, membership starts and seller-setup progress to measure service reliability and repeat use. These records do not include chat contents, photo bytes, addresses, tokens or physical chip identifiers. Account deletion removes the associated activity records. Settled sale records retain catalog identity, condition, price and sale date for market history and financial reconciliation. Shipping providers receive sender and recipient contact and parcel information when a shipping quote or label is requested.

Contact

For questions about this policy or your information, email holotapcards@gmail.com. We will update this page when the way the service handles information changes.