Privacy Policy

Summit Cards ("we", "us", "our") operates summitcards.co.uk, a Pokemon TCG collection tracker and price guide built for collectors.

• Account information: Email address and password (securely hashed) when you register.
• Collection data: Cards you add to your collection, wishlists, custom collections, and Pokedex progress.
• Profile data: Optional display name and leaderboard preferences.
• Payment data: Subscription payments are processed by a third-party payment provider. We do not store your card details.
• Usage data: If you accept cookies, we collect anonymised usage statistics (pages visited, features used). No analytics data is collected until you consent.
• Feedback: Messages you submit via the feedback form, along with the category selected.

• To provide and maintain your account and collection.
• To process subscription payments.
• To improve the site based on anonymised usage analytics (only with your cookie consent).
• To respond to feedback and support requests.
• To enforce our terms, prevent abuse, and protect the security of the service.

Your data is stored securely using trusted hosting providers. All connections use HTTPS encryption, and access controls ensure users can only view their own data.

We use the following cookies:

• Essential cookies: Authentication session cookies required for login functionality.
• Analytics cookies: Anonymised usage tracking, only set after you accept via the cookie consent banner.
• Preference cookies: Your selected currency and cookie consent choice, stored locally in your browser.

You can change your cookie preferences at any time by clearing your browser data.

We use trusted third-party services for payment processing and anonymised analytics. These services have their own privacy policies and only receive the minimum data necessary to function. We do not sell or share your personal data with any other third parties.

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate data.
• Erasure: Ask us to delete your account and all associated data.
• Portability: Request your data in a portable format.
• Object: Object to processing of your data for analytics purposes.

To exercise any of these rights, please get in touch via our feedback form.

We retain your account and collection data for as long as your account is active. If you delete your account, all associated data will be permanently removed within 30 days. Analytics data is anonymised and cannot be linked back to individual users.

Summit Cards is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please let us know so we can delete it.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

If you have any questions about this privacy policy or your personal data, please get in touch via our feedback form.