Privacy Policy

1. Who We Are

This policy covers ChaseCulture (Discord community and website) and ChaseCultureComp (our companion mobile app for scanning and pricing Pokémon TCG cards). Both are operated as one platform. If you have questions about this policy, contact us via the ChaseCulture Discord server.

2. Information We Collect

• Discord account info: When you sign in with Discord (on the website or in ChaseCultureComp), we receive your Discord user ID, username, and avatar. On the website we also request your email address as part of the sign-in scope.
• Subscription & vendor status: We store your Discord ID alongside your subscription tier and status (via Stripe) to determine access to Subscriber or Vendor features, including ChaseCultureComp, which is restricted to active Vendor subscribers only.
• Card photos (ChaseCultureComp): When you scan a card, the photo is sent to our server and forwarded to our AI vision provider (Anthropic) for identification. We do not store your photos — they are processed in memory and discarded once the card is identified.
• Watchlist data: If you add a card to your Market Watchlist, we store the card name and set so we can show you pricing updates. This is tied to your vendor profile, not to any photo.
• Vendor profile: If you set up a public vendor profile on the website (display name, bio, socials, TCG specialties), that information is stored and shown publicly on our vendor directory.

3. How We Use Your Information

• To verify your subscription/vendor status and grant or restrict access accordingly.
• To identify Pokémon cards from photos and return live market pricing.
• To send you Discord DMs about your subscription (welcome messages, renewal reminders, payment issues) and, if you've added cards, market watchlist updates.
• To operate community features such as the vendor directory and event attendance notifications.

4. Third Parties We Share Data With

• Anthropic (Claude AI): Card photos are sent to Anthropic's API solely to identify the card. Anthropic processes this under their own data handling terms; we do not send any other personal data alongside the photo.
• Discord: Used for authentication (OAuth) and to deliver notifications. We only request the minimum scopes needed (identify, and email on the website).
• Stripe: Handles all subscription payments. We never see or store your card details — only subscription status and a card fingerprint used to prevent trial abuse.
• eBay Australia & TCGdex: We query these public data sources to fetch market pricing and verify card details. No personal data about you is sent to them — only the card name being looked up.

5. Data Retention & Deletion

We retain your Discord ID, subscription status, and watchlist data for as long as your account is active. Card photos are never stored. You can request deletion of your ChaseCulture data at any time by contacting us in the Discord server — we'll remove your subscriber record, vendor profile, and watchlist within a reasonable timeframe, subject to records we're required to keep for billing/tax purposes.

6. Children's Privacy

ChaseCulture, ChaseCultureComp, and the Auto-Open extension are not directed at children. Discord requires users to be at least 13 years old, and our services follow the same requirement.

7. Browser Extension (ChaseCulture Auto-Open)

• Account token: The extension stores your ChaseCulture account token in Chrome's local extension storage (chrome.storage.local) on your device only — it is never synced to your Google account or any other device. The token is sent, over HTTPS/WSS, only to our own API (api.chaseclub.com.au) to verify your subscription and open an authenticated alert feed.
• Restock alert data: When a restock alert fires for a product you're subscribed to, the extension receives the product name, retailer, price, and URL, and stores your most recent alerts locally on your device so the popup can show your history. This alert data is not shared with any third party.
• What it does with tabs: The extension only opens a new browser tab to the public retailer product page you were alerted about. It does not read, modify, or inject anything into the pages you visit, and it never touches retailer accounts, saved payment details, carts, or checkout — purchasing is entirely manual, in your own browser.
• Retailer site permissions: The optional permissions for individual retailer domains (BigW, Target, Kmart, EB Games, Amazon AU, Toymate, JB Hi-Fi, Myer, Costco, Mr Toys) exist for future opt-in features and are not required for the extension to open alert tabs. You are never asked to grant them unless you explicitly enable a feature that needs one.
• Local dev/testing data: None of the above changes if you use the extension's local-dev-backend option — that setting only exists for our own development builds and points at a developer's own machine, not a third party.

8. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be announced in the ChaseCulture Discord server.