Privacy & Terms

What we collect

Login details: your email address and display name when you log in with Google or an email code. We don't use passwords and we never collect payment details.

Contact details (optional): the WhatsApp, LINE or WeChat ID you enter on the Me page. Only you and the site admins can see them; we use them to reply to your feedback and never make them public.

Your collection: cards, quantities, condition or grade, cert numbers, purchase prices and dates, channels, storage location, notes, uploaded photos, sales, wishlist and custom cards.

Feedback: what you write, screenshots you upload, the page you were on and your browser type. To stop spam we keep a salted hash of your IP address (never the raw IP).

Why

Only to provide tracking, valuation, sharing and export, and to prevent abuse. We don't sell your data, use it for ads, or share it with anyone for marketing.

Where it's stored

Account and collection data live in a database on our own server (OVH data centre, Mumbai, India; since 2026-10-20 we no longer use Supabase's Singapore cloud), and our web server is in the same place. Photos and feedback screenshots are in private Cloudflare R2 storage with no permanent public links and are shown only through time-limited links: you and the site admins can see them, and if you make a folder public, anyone with the share link can also see the first photo of each batch in that folder (see “Public sharing”).

The database is backed up nightly (on the server and in private Cloudflare R2 storage); backups are kept for at most 30 days.

To handle problems and feedback and keep the service running, site admins can view your collection, wishlist, custom cards and photos in the admin area (view only, no changes). Each time an admin opens your detail page (holdings, photos, wishlist and so on), which admin and when is logged automatically; the log is kept for 400 days (older entries are deleted automatically every night) and only admins can see it. The admin user list shows each user's email, sign-up and last sign-in time, counts and total collection value; browsing the list is not logged view by view.

Slab photos are used only to read the cert number and are not stored. Cert numbers are saved on your own entries; the server also keeps a cert-lookup cache keyed by cert number (just the number plus the card details and grade alt returned, not linked to your account). Cert numbers are never shown publicly — share pages hide them too.

Who we share it with

Google — only to confirm who you are when you choose Google login.

alt.xyz — when you enter a grading cert number, search by cert number, or photograph a slab, we send the cert number or that photo to alt.xyz to identify the card and fetch sales (only the cert number or the photo is sent, nothing else about you).

Moonshot AI (Kimi) — when you photograph or upload a card in Live Prices and alt can't recognize it, we send that photo to Moonshot AI to read the card number and name (only the photo is sent, nothing else about you). We delete it right after reading and don't keep it.

Prices come from public data on TCGplayer (via tcgcsv), alt.xyz, SNKRDUNK and 遊々亭. We read from them; we never send them your collection.

Login code emails are sent by our own mail server (noreply@tcg95.com).

Google Analytics — to count site visits (pages viewed, rough region, device and browser), only to improve the site. Your collection, email and cert numbers are never sent to it.

Cookies & browser storage

Your login and interface language (needed for the site to work). Google Analytics also sets statistics cookies (starting with _ga), used only to count visits. No advertising cookies. If you don't want to be counted, block cookies in your browser or install the Google Analytics opt-out add-on — the site still works.

Public sharing

Folders are private by default. If you turn on “Public”, anyone with the link can see that folder's card images, names, condition / grade, quantities, current prices and total value without logging in, plus the first photo you took of each batch (if any), the signer and multipliers of signed cards, and your display name (you can turn off “Show my display name on the public page” in the share settings). Purchase prices are hidden by default; notes, storage location, cert numbers and your email are never shown. You can turn it off or change the link at any time.

Export & deletion

Download your whole collection and sales any time from “Me → Export CSV”.

Delete your account from “Me → Delete account”: your collection, sales, wishlist, custom cards, photos, feedback (with screenshots), daily value history and login are deleted immediately and can't be recovered. Old copies in backups are deleted automatically within 30 days.

Terms of use

The site is free. We do our best to keep it running but can't promise it will always be available or error-free.

Prices come from public sales and market data and are for reference only — not buying, selling or investment advice. Decisions you make based on them are your own.

You can pick the matching listing for your own cards from the listings we found (“Price looks wrong? Pick the matching listing”). It only changes your own record, and which listing you pick is your choice and responsibility. When two or more holders pick the same listing, the whole site switches to it.

Card names and images belong to their publishers (Bandai, The Pokémon Company, Konami and others). tcg95 is not affiliated with them; images are used only to identify cards.

Please don't scrape the site at scale, get around its limits, or upload illegal, infringing or abusive content. We may disable features or accounts that do.

Contact

Questions? Tell us through “Feedback” on the site. If we make important changes, we'll update the date at the top.