Skip to content

Privacy Policy

Last updated: October 28, 2026

Who operates this site

Pokemon Card List is operated by Lucent Enterprises Ltd., a British Columbia corporation. This policy explains how we collect, use, disclose, retain, and protect personal information when you use this website, contact us, or click outbound marketplace links.

Privacy contact: Privacy Officer, Lucent Enterprises Ltd., privacy@pokemoncardlist.net.

Mailing address: 329 Howe StUnit #800Vancouver, BC V6C 3N2Canada

Information we collect

  • Information you send us. If you email us, we receive your email address, message content, and any information you choose to include.
  • Search and page request data. Search terms appear in the page address. Our hosting provider, Cloudflare, processes your IP address, browser details and the page address (which can include a search term) to deliver and protect the site. We do not keep our own request logs, except the one below.
  • Buy links from our Discord bot and apps. A Buy link in our Discord bot or our ChatGPT or Claude app opens a page on this site (/buy/...) that sends you on to the store. For each one we log the card, finish, store, which bot or app it came from and your country (worked out from your IP address by Cloudflare). We do not log your IP address, browser details or any account.
  • Card photos. Photos you send to Scan a card are sent once to Cloudflare Workers AI to read the card. We do not store or log them, and Cloudflare does not use them to train models. For a binder page, your browser cuts the photo into one image per pocket and sends only those images.
  • My collection. Your collection is stored only in your browser (IndexedDB and local storage on your device); we have no copy and no account. Backup links hold your collection in the part of the address after the # sign, which browsers do not send to our server. To show prices, your browser asks our server for the price list of each set you own cards from, so our server sees which sets are requested, not which cards. Importing a file and “Show value over time” send your card list to our server once to match it or look up prices; it is answered and discarded, not stored or logged.
  • Analytics. We use Google Analytics 4, a service of Google LLC, to count page views and clicks on marketplace links (which link, and which page, card or set). Google Analytics sets cookies named _ga and _ga_VXMRQ00V8D that hold a random ID for your browser and last up to 2 years. We do not send your name, email or any account ID to Google. See How Google uses information from sites or apps that use our services. You can block these cookies in your browser or with Google’s opt-out add-on. In the EU, the UK, Switzerland and Quebec, Google Analytics sets no cookies until you choose Accept, and you can change your choice at any time with the Cookie settings link in the footer.
  • Error reports. When a page fails to load, our server sends an error report to Sentry (Functional Software, Inc.). It contains the page address (which can include a search term) and technical details of the error. Sentry is set not to send IP addresses or cookies.
  • Marketplace links. When you follow a link to TCGplayer, CardNexus, eBay or Amazon, that company and its affiliate network (Impact for TCGplayer and CardNexus) may set or read cookies and collect information directly from you, such as your IP address and the page you came from, to credit the referral to us. Their own privacy policies apply. The site does not require an account and does not set its own advertising cookies.
  • Advertising (Google AdSense). Google AdSense serves ads on content pages of this site (not on search, My collection or Scan a card). Google and its advertising partners use cookies, local storage, device identifiers and similar technologies to serve ads based on your visits to this and other websites and to measure them. In the EU, the UK and Switzerland, Google’s consent message asks for your choice before personalized ads are shown. You can turn off personalized ads in Google’s Ads Settings. We do not keep an advertising profile of visitors.

How we use information

  • Operate, maintain, secure, debug, and improve the website.
  • Show search results, card pages, guide pages, set pages, and rarity pages.
  • Measure aggregate usage, outbound clicks, affiliate performance, and content quality.
  • Respond to emails, correction requests, takedown requests, complaints, and other support messages.
  • Prevent abuse, investigate security issues, and comply with legal obligations.

Consent and choices

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, with consent where required by applicable privacy law. You may withdraw consent to optional uses by contacting us, subject to legal, security, or operational limits. You can also use browser controls to block cookies, limit referrers, or use private browsing, although some third-party websites may not work the same way.

When we disclose information

  • Service providers we use. They process information for us under their own systems and safeguards:
    • Cloudflare, Inc. (United States): hosting, content delivery, security, and storage of card images.
    • Google LLC (United States): Google Analytics and Google AdSense.
    • Functional Software, Inc. (Sentry): error reports.
    • Affiliate networks: Impact (TCGplayer), eBay Partner Network and Amazon Associates. They collect click and purchase data on their own sites, not from us.
  • Marketplace and affiliate partners. If you click an outbound link, the destination site may receive information such as your IP address, browser information, referring page, search query in the destination URL, and affiliate parameters. We participate in the eBay Partner Network, Amazon Associates, and the TCGplayer and CardNexus affiliate programs (via Impact). TCGplayer, CardNexus and eBay links carry the country your visit comes from (worked out from your IP address by our host, Cloudflare; the address itself is not stored or passed on) so that we can see which regions the referrals come from.
  • Legal and safety reasons. We may disclose information where required or permitted by law, to protect rights and security, to respond to lawful requests, or in connection with a business transfer.
  • Aggregated or de-identified information. We may use or share information that no longer identifies an individual, such as aggregate traffic or click statistics.

Affiliate and third-party links

Links to TCGplayer, CardNexus, eBay and Amazon are affiliate links, and we may earn a commission when you buy after clicking them. Cardmarket links are not affiliate links. Third-party websites, including marketplaces and data sources, are governed by their own privacy policies and terms. We do not control their collection, use, disclosure, cookies, checkout flows, or account systems.

Storage, transfers, and retention

We operate from British Columbia, Canada, but service providers may store or process information in Canada, the United States, or other countries. Information processed outside your province or country may be subject to the laws of that location.

We keep personal information only as long as reasonably necessary for the purposes described in this policy, for legal or security needs, or as required by law. Routine event logs and correspondence are intended to be retained only while useful for operations, support, analytics, fraud prevention, or legal compliance, then deleted, de-identified, or aggregated.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information we handle. No website or transmission method is perfectly secure, so we cannot guarantee absolute security.

Children and youth

This site is a general card database and is not designed to collect personal information from children. We do not offer accounts, comments, direct messaging, or checkout. If a parent or guardian believes a child sent us personal information, contact us and we will review and delete it where appropriate.

Access, correction, and complaints

You may ask whether we hold personal information about you, request access to it, request correction, or challenge our privacy practices by contacting the Privacy Officer at privacy@pokemoncardlist.net. We may need enough information to verify and process the request, and we will respond within the timelines required by applicable law.

If your concern is not resolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, depending on the issue.

Changes to this policy

We may update this policy as the site, service providers, laws, or business practices change. The updated version will be posted here with a new last updated date. For general questions, email hello@pokemoncardlist.net. You can also read our Terms of Use and Disclaimer.