Privacy Policy
Last updated October 27, 2026
PokéCameos ("we," "us") is a fan-run catalog of Pokémon TCG cameo cards at pokecameos.com. You can browse the whole site without an account. This policy explains what we collect when you do more than browse, and what we do with it.
What we collect
- Account details. If you sign up, we store your email address and a securely hashed password, or the basic profile Google shares with us (email and name) if you sign in with Google.
- Your wishlist and collection. The cards you mark as Want or Got, linked to your account.
- Reports you submit. When you report a missing or wrong cameo, we store what you wrote, any source link you include, and which account sent it.
- Price alert subscriptions. If you sign up for buy-signal emails (no account needed), we store your email address, the Pokémon or card you chose, and whether you confirmed or unsubscribed.
- Usage data. Google Analytics records pages viewed, clicks on TCGplayer links, approximate location, device and browser type. This helps us see which pages are useful.
- Browser storage. We save small preferences in your browser, such as your card language filter, and a login session cookie when you are signed in.
How we use it
- To run your account, wishlist, and collection.
- To review reports and improve the cameo catalog.
- To send the price alert emails you asked for, and account emails such as password resets.
- To understand site traffic and fix problems.
We do not sell your personal information, and we do not send marketing email you did not sign up for.
Services we rely on
We share data only with the providers that run the site:
- Supabase stores accounts, wishlists, reports, and alert subscriptions.
- Vercel hosts the website.
- Brevo delivers our emails.
- Google provides sign-in (if you choose it) and Google Analytics.
- TCGplayerreceives a referral tag when you click a card link, so it can credit us for affiliate purchases. What you do on TCGplayer is covered by TCGplayer's own privacy policy.
We may also disclose information if the law requires it.
Your choices
- Delete your account any time from your account page. This permanently removes your account, wishlist, collection, and reports. See data deletion for other options.
- Unsubscribe from price alerts with the link in any alert email.
- Block analyticswith a browser extension or Google's opt-out add-on. The site works the same without it.
- Ask us for a copy of your data, a correction, or deletion by emailing phil@pokecameos.com. Depending on where you live (for example the EU, UK, or California), you may have these rights by law, and we honor them for everyone.
How long we keep it
Account data stays until you delete your account. Alert subscriptions stay until you unsubscribe; unconfirmed signups are not emailed again. Analytics data is kept according to Google Analytics retention settings.
Security
Data is sent over HTTPS and stored with access controls so each account can only see its own wishlist and reports. No system is perfectly secure, so please use a unique password.
Children
PokéCameos is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.
Changes
If we change this policy, we will update the date at the top of this page. Significant changes will be noted on the site.
Contact
Questions about privacy? Email phil@pokecameos.com. See also our Terms of Service.