PitchComps is a soccer trading card app — track your collection, compare card prices against live eBay listings, and follow how a player's live match performance moves their card's market. This page explains exactly what data the app collects, why, and what you can do about it.
01Who this policy covers
This policy applies to anyone who uses the PitchComps mobile app, available for Android and (in future) iOS. It's written to be read by an actual person, not a lawyer — if anything here is unclear, use the contact details at the bottom.
02What we collect
PitchComps is built so browsing and searching work without an account. Creating an account — needed to track a Vault, save searches, or get price alerts — is what triggers data collection.
Category
What, specifically
When
Account
Email address, and a password (stored as an irreversible hash — we never see or store your actual password)
When you sign up
Vault data
Card details you enter (player, set, year, card number, serial), purchase and sale prices, and an optional photo you attach
When you add or edit a Vault card
Saved searches
The search terms you save (e.g. a player or card name)
When you save a search
Push notification token
A device identifier used to deliver alerts — not your name, phone number, or contacts
When you turn on Push Notifications in Profile
Basic usage
Standard technical logs (timestamps, error reports) generated by our backend infrastructure
Automatically, while using the app
We do not collect your real name, address, phone number, or any payment card details directly — if in-app subscriptions are added in the future, payment is handled entirely by Apple/Google's own purchase systems, and PitchComps never sees your card number.
03How we use it
To run your account — signing you in, confirming your email, and letting you reset a forgotten password.
To power the features you use — showing your Vault, your saved searches, and matching your card searches against live eBay listings.
To send alerts you've opted into — a price drop on a saved search, a new matching listing, or a Vault card crossing a sell-worthy price — only if you've turned on Push Notifications.
To keep the app secure — detecting abuse and enforcing that you can only see and edit your own data.
We do not use your data to build an advertising profile, and we do not sell it.
04Who we share it with
We use a small number of outside services to actually run the app. Each one only gets what it needs to do its specific job:
Service
What it handles
Supabase
Our database, authentication, file storage, and backend logic — effectively the app's engine room.
Resend
Delivers account emails (confirmation, password reset) — receives your email address only for that purpose.
eBay
Powers live card listing data. If you tap "View on eBay" from a listing, eBay's own site and privacy policy apply from that point on, and (as an eBay Partner Network affiliate) we may receive a commission on a resulting purchase — eBay does not receive any other PitchComps account data from us.
API-Football
Supplies live match, lineup, and player statistics — this is one-way public sports data, not connected to your identity.
Expo / Firebase Cloud Messaging
Delivers push notifications to your device, using the device token described above.
We don't share your data with anyone else — no data brokers, no advertising networks, no sale of any kind. We'd only disclose account information beyond this list if legally required to (for example, a valid court order).
05Where it's stored
Your data is stored in a Supabase-hosted database, protected by row-level security rules that technically restrict every account's data to that account alone — not just at the app layer, but enforced by the database itself. Vault photos are stored in a separate, access-controlled file bucket under a path scoped to your account.
06How long we keep it
We keep your account data for as long as your account exists. If you delete your account (Profile → Delete Account, inside the app), we permanently remove your Vault items, saved searches, uploaded photos, push notification token, and login credentials. This can't be undone.
07Your rights
Access and edit — everything you've entered (Vault cards, saved searches) is visible and editable directly in the app.
Delete — Profile → Delete Account removes your data as described above, immediately and permanently.
Opt out of notifications — turn off Push Notifications in Profile at any time; this also deletes your stored device token.
Ask us directly — for anything not covered by the in-app controls, reach out using the contact details below.
08Children's privacy
PitchComps isn't directed at children under 13, and we don't knowingly collect data from anyone under that age. If you believe a child has created an account, contact us and we'll remove it.
09Changes to this policy
If this policy changes in a meaningful way, we'll update the date at the top of this page. Significant changes — anything that changes what we collect or how we use it — will also be noted in the app.
Plain-language summary: we collect your email to run your account, the card/search data you choose to enter to power the app's features, and a device token only if you turn on notifications. We use a handful of infrastructure and sports-data providers to make the app work, we don't sell your data or use it for ads, and you can delete everything permanently from Profile whenever you want.